[quote="cluther"]On May 2, 2009, at 10:20 PM, morganr wrote:

> Here�s what I discovered after running wmic -U  domain/ 
> administrator //10.0.0.15 "select * from Win32_ComputerSystem" from  
> my zenoss box.
> 
> After checking my windows firewall log I notice my zenoss server is  
> being dropped. So I turn off the windows fire wall and try the above  
> script, it works! Ok, I�ll just get the destination port and allow  
> it in my firewall settings. I discover that it seems to be tcp/4846  
> and again run the above command, it works. I set up two domain  
> controllers with the same port, they work. I set up an exchange  
> server on the same network, it fails. I check the firewall logs and  
> looks like the the destination port is different.
> So my question is, how should I set up my windows firewall to allow  
> incoming traffic from zenoss?
> 

This is standard DCOM/RPC stuff. So you have to open the following  
from the Zenoss server to the Windows servers.

135/tcp
445/tcp

> 1023/tcp (yes, anything above port 1023 could be used)
> 
_______________________________________________

This problem has really become a problem. As suggested from the zenoss 
documents I’m using “snmp informant” as a gathering tool. I guess that it 
some how binds it’s self to snmp because I don’t see it running as its own 
service. 
When I run the tool “Sysinternals TCPView for windows” I don’t see port 
445 listening or connected and don’t see “snmp informant”. And when I try 
to add port 445/tcp in windows firewall I get a message it’s already 
installed. Port 135/tcp no problem.

I look at my firewall log on the windows server and see zenoss is still being 
dropped. So, I add the destination port reported in the log file “in this 
case 11879/tcp” go back to zenoss and it works.

So, I’m REALLY confused why I’m having this problem with my firewall 
settings and zenoss. 

Let me ask, if you were doing a clean install with zenoss, monitoring a windows 
server 2003 with the firewall turned on, what steps would you use?  

-Rick




-------------------- m2f --------------------

Read this topic online here:
http://forums.zenoss.com/viewtopic.php?p=34208#34208

-------------------- m2f --------------------



_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users

Reply via email to