>> created a general rule on the firewall that allows ALL traffic >> from my WUG server through to my DMZ. I then try to scan >> the services on one of my DMZ >> servers and am getting a refusal from that box. My firewall logs are >> telling me that the DMZ machine is refusing connections to port 445 >> connection refused.
By any chance is your WUG box running Windows 2000 or later, and the DMZ box NT 4.0 or earlier? Port 445 is the "Direct Hosting" port used for file sharing connections in later versions of Windows. This removes the "Netbios over TCP" layer and thereby makes windows file sharing slightly more efficient, especially over the Internet. But older versions of Windows don't support it so they would refuse an incoming connection from 445. Now Windows is supposed to be smart enough to "step down" to the old protocol when needed, but it is possible your WUG box is configured in such a way to prevent this. If you think this might be the case, I recommend you read Microsoft Knowledge Base article Q204279, which is on the Web here: http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q204279 It discusses how to turn it on and off and how to determine its setting. --Tim Farley IPSWITCH Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
