TCP/IP Filtering

I'm looking to lockdown a server that has two nics on it.
One NIC is a direct connection to the internet, and the
other has full internal access. I turn filtering on and
setup the direct internet connection to only allowed the following ports:

TCP:
20
21
25
80
110
443

UDP:
53

I am unable to resolve DNS names through the name
server. When I use nslookup, it times out on both DNS servers. Am I missing something? I tried this on Windows
2000 Advanced and Windows 2003 Advance and have had no
luck with both. Thanks.

Gus

 

Have you tried it with Port 53 TCP open as well?

 

Tried that too ...

 

You are filtering the return inbound response to your outbound request (on UDP port >1023). Drop your UDP filters or use IPSec (Win2k) or enable the firewall in Win2003.