Jimey’s Life && Jimey’s World » Other http://jimey.com Learning something new everyday Fri, 30 Jul 2010 13:29:31 +0000 en hourly 1 http://wordpress.org/?v=3.0 纯idea 时间流+空间流 http://jimey.com/2010/03/29/idea-of-pure-space-time-stream-flow.html http://jimey.com/2010/03/29/idea-of-pure-space-time-stream-flow.html#comments Mon, 29 Mar 2010 06:16:28 +0000 jimey http://jimey.com/2010/03/29/%e7%ba%afidea-%e6%97%b6%e9%97%b4%e6%b5%81%e7%a9%ba%e9%97%b4%e6%b5%81.html 有foursquare这样的空间流应用

具体可以查看http://foursquare.com/

不知道能否有个timeline+spaceline 的应用?

即:记录每天24小时,在什么地方待了多久,在什么地方待了多久 如此记录下每天的行程

虽然对于个人隐私来讲,这些数据不便公开,但是就好比车载一样,来一个人载记录下自己每天的行程

犹如目前已有的记录自己每天做什么事情的录像记录模式一样,其实待今后退休,闲暇的时候均可以翻出来回忆

随着越来越繁忙的生活,越来越没办法闲暇来记录自己的点点滴滴的时候 在如此越来越开放如此越来越没隐私的社会,也许将会有如此产品推出吧?

相关博文

]]> http://jimey.com/2010/03/29/idea-of-pure-space-time-stream-flow.html/feed 1 数字化移动化乞丐的思考 http://jimey.com/2009/12/27/digital-mobile-beggars-thinking.html http://jimey.com/2009/12/27/digital-mobile-beggars-thinking.html#comments Sun, 27 Dec 2009 03:53:17 +0000 jimey http://jimey.com/2009/12/27/%e6%95%b0%e5%ad%97%e5%8c%96%e7%a7%bb%e5%8a%a8%e5%8c%96%e4%b9%9e%e4%b8%90%e7%9a%84%e6%80%9d%e8%80%83.html 早上躺床上无聊，想来想去，不知道怎么想到这儿去了

也许是前2天在网上看到这个图？

 

我在想着，以后大家在街上要饭，直接丢个显示屏在前面，显示当前讨了多少钱

当然，这个显示多少钱是跟网上交易账号挂钩的，比如绑定个支付宝账号呀，绑定个paypal啊(让国际友人也有机会给钱嘛)

另外也不要要这个纸板了，直接弄个平板电脑丢前面，滚动显示多好，内容又丰富精彩，还可以自定制，再加个摄像头，自动对过路行人进行外貌分析。

比如看到要走来一个小妞，那么就显示卡哇伊点的文字风格

比如看到对面走来一老外，那么内容就显示英文嘛  lol 要不然谁看得懂中文

 

然后路过的行人们，想给钱的，利用RFID技术，直接拿出自己的手机(无线手持装置)，输入个价钱，对着这人的接收装置，直接按个回车就可以走人了嘛，也不用翻翻自己钱包有没零钱，省时又省事。

……………………………………………………………………

另外再来点中国特色，每个乞丐都要去当地部门登记，才可以领取比如RFID识别，或者是全球唯一IPv6地址认定。这样可以保证乞讨事实的真实可靠性，当然这些都是要靠管理部门的信誉来保证了……后话不提

相关博文

]]> http://jimey.com/2009/12/27/digital-mobile-beggars-thinking.html/feed 1 SONY PRS505不丢书解决办法 http://jimey.com/2009/10/13/sony-prs505-throw-the-book-is-not-a-solution.html http://jimey.com/2009/10/13/sony-prs505-throw-the-book-is-not-a-solution.html#comments Mon, 12 Oct 2009 17:02:40 +0000 jimey http://jimey.com/2009/10/13/sony-prs505%e4%b8%8d%e4%b8%a2%e4%b9%a6%e8%a7%a3%e5%86%b3%e5%8a%9e%e6%b3%95.html 又研究了1个小时.为了传进去我下午花了2个小时转换的一本切了白边的书，如果不切白边的话，估计再看下去会把眼睛看坏的，6寸的小屏幕看原版的pdf实在是太费眼睛了

由于cpu太弱，用.exe转换需要好久

转换之后效果倒是很不错

从图片1切了白边就变图片2的效果了

1

 

2

这样丢到6寸里面之后，基本上字都可以看清楚不用放大了

放大有个好处就是字很大，但是……像图2中这Fig 1.2的图就没希望看了

所以切了白边以后，不用放大，字也可以看清楚，图也可以看到

………………

书转换好了，就开始往里面传书了，我的噩梦就开始了

删除原来那本，然后装入新的这本

完全找不到新插入这本……

http://www.hi-pda.com/forum/viewthread.php?tid=417538

照这个教程来的，但是没用……依然找不到，后来把cache文件删除，再生成出来的cache.xml文件就变态了

原来好歹缺那一本还有800多k大小，现在新生成的cache.xml就只有100k大小了

最终，采用了终极无敌大法，格式化SD卡，然后重新传书，终于全部好了。。阿门…

现在很后悔买了16G的SDHC卡，我要是当初买4个4G的SDHC卡多好吧。唉

ps: 前天在homeplus见到4G的SDHC卡卖11900韩元…拿起来又放下去，拿起来又放下去..唉我后悔……

相关博文

]]> http://jimey.com/2009/10/13/sony-prs505-throw-the-book-is-not-a-solution.html/feed 0 WinSSHD使用配置即win系统下SSH服务器软件对比 http://jimey.com/2009/09/22/winsshd-using-the-configuration-that-win-under-the-ssh-server-software-system-comparison.html http://jimey.com/2009/09/22/winsshd-using-the-configuration-that-win-under-the-ssh-server-software-system-comparison.html#comments Tue, 22 Sep 2009 09:38:38 +0000 jimey http://jimey.com/2009/09/22/winsshd%e4%bd%bf%e7%94%a8%e9%85%8d%e7%bd%ae%e5%8d%b3win%e7%b3%bb%e7%bb%9f%e4%b8%8bssh%e6%9c%8d%e5%8a%a1%e5%99%a8%e8%bd%af%e4%bb%b6%e5%af%b9%e6%af%94.html 想做ssh的服务器，但是由于俺的*unix有其他用处，所以暂时找了一台win来做

先是用了 界面很简洁，但是管理上不是很方便，尤其是多用户多账号的情况下要在windows开启n个用户，监控上也不是很便捷

后来改，看起来操作很复杂，具体没仔细研究，然后直接跳去用

目前有4/5 版本，4版本界面也不是非常的友好

而5个人版在限制了一些使用量，比如开虚拟用户数10个以内，还有几个功能之外，并无任何限制

先是安装了试用版，功能完全版，在研究了一段之后，终于明白4那些功能究竟是怎么用了的，因为5有个实时的event提示功能，如果哪里出错可以明白

最终试用之后

决定采用5的个人版本

1.在win那边开一个账号

2.打开 最下面的Password Cache 把win的那个新建账号和密码输入

这步的主要目的是后面的虚拟用户建立的时候都是通过这个真实用户来登陆验证访问的

3.进入Edit setting

window group  windows accouts  一步一步按自己需求设置

virtual group 也是一样一步一步设置即可

virtual accouts 这边基本设置都跟virtual group 账号和密码自己设置即可

以上……

相关博文

]]> http://jimey.com/2009/09/22/winsshd-using-the-configuration-that-win-under-the-ssh-server-software-system-comparison.html/feed 0 电子书会不会消灭掉传统出版业 http://jimey.com/2009/09/01/e-book-will-destroyed-the-traditional-publishing-industry.html http://jimey.com/2009/09/01/e-book-will-destroyed-the-traditional-publishing-industry.html#comments Tue, 01 Sep 2009 06:26:58 +0000 jimey http://jimey.com/2009/09/01/%e7%94%b5%e5%ad%90%e4%b9%a6%e4%bc%9a%e4%b8%8d%e4%bc%9a%e6%b6%88%e7%81%ad%e6%8e%89%e4%bc%a0%e7%bb%9f%e5%87%ba%e7%89%88%e4%b8%9a.html 1.未来肯定会消灭掉传统纸行业出版的

2.未来肯定没纸 (bt同学已经谈过)

3.对于电子书出版，会大大降低出版业的门槛，就好比之前的网络歌手

4.对于电子书出版，不用纸质的话，也会对环境减少污染，至少不用砍树造纸了吧

5.出行的时候，带着一本电子书阅读器，装几百几千本书也没问题，想象下当年文人出行带几车书的恐怖情景

6.可以在书上随意涂写都没问题，因为可以随意擦掉

7.电子书的成本，相当于纸质书来讲更低更低，修改方便，也不用second edition之类叫大家一版再一版的买,直接update即可

8.与无线网结合，amazon那个报纸投递项目真的很不错，这样很快邮递员将失业

 

看这篇有感

http://www.readwriteweb.com/archives/does_amazons_999_price_for_ebooks_spell_the_end_of.php

最后，我的 PRS-505就快到手了  大家撒花庆祝吧

相关博文

]]> http://jimey.com/2009/09/01/e-book-will-destroyed-the-traditional-publishing-industry.html/feed 4 DIY Filing Cabinet Linux Server Cluster http://jimey.com/2008/10/14/diy-filing-cabinet-linux-server-cluster.html http://jimey.com/2008/10/14/diy-filing-cabinet-linux-server-cluster.html#comments Tue, 14 Oct 2008 05:10:52 +0000 jimey http://jimey.cn/2008/10/14/diy-filing-cabinet-linux-server-cluster.html 没有最bt，只有更bt。

当然如果家用这么牛X的电脑的话，真的是cloud computing in family咯~

转自

http://lifehacker.com/5062441/diy-filing-cabinet-linux-server-cluster

Freelance animator Janne needed a cheap way to do a whole lot of CPU-intensive 3D rendering, so he built a into an Ikea filing cabinet to get the job done. The Helmer was a whole lot cheaper than what CPU cases would cost for the servers he built, and it saved a lot of space, too. Check out the Helmer site to get the details of how Janne mounted the motherboards and fans inside the cabinet to create a home-friendly, energy-efficient, six- .

接着在lifehack页面转到这个详细的制作过程是更加的bt

http://helmer.sfe.se/

真的是梦幻级的配置24核48G Ram

3D computer rendering are very CPU intensive and the best way so speed up slow render problems, are usually to distribute them on to more computers. Render farms are usually very large, expensive and run using ALLOT of energy. I wanted to build something that could be put in my home, not make too much noise and run using very little energy… and be dirt cheep, big problem? :) no computer stuff cost almost nothing these days, it just a matter of finding fun stuff to play with.

I wanted to use Intel Quad core 65 nm or better. I surfed the web and found 6 of then at a good price. Then I looked after the cheapest motherboard that could run these. The result of my investigation was the Gigabyte S-series GA-G33M-DS2R/S2 card.

..and my cat approve.

Next, finding memory. The motherboard could hold up to 8GB of memory each, and I wanted to maximize all I could. Here are the 12x4GB =48GBmemory modules.

Mounting CPU coolers.

Next problem was to find a good computer case that could hold these motherboards. But this was a big problem. 6x cases cost almost as much as the motherboards and CPU’s! So here was some room for improvement. I found the IKEA helmer cabinet. Perfect! Who knew IKEA made there stuff ATX compatible. :)

Some extra support for backside of box.

Mounting power supplies and fans in zig zag pattern to maximize airflow.

Motherboard H1, H2 and H3 mounted. Fans on wrong side. I mounted 3 mm plexiglas under the motherboard so it would not short circuit when I installed them.

Big mess on floor.

Disk cloning in progress. I used Fedora 8, and the command "dd" to clone the discs from the bootable System rescue CD disc.

> dd if=/dev/sda of=/dev/sdb

Done! I use the software Dr Queue as batch job dispatcher. All connected to a 8 port 3 com gigabit switch. Common storage using nfs to a FreeNAS running on a Via C7 machine (that just need 20 W power .. another story :) Instead of power switch I used a simple cable to the "pwr" jumper on motherboard. (Wires tejped on right side)

Instructions of how I did the DrQueue setup is here:
DrQueueHOW-TO.pdf

The most amazing is that this machine just cost as a better standard PC, but has 24 cores that run each at 2.4 Ghz, a total of 48GB ram, and just need 400W of power!! This means that it hardly gets warm, and make less noise then my desktop pc.

Render jobs that took all night, now gets done in 10-12 min.

..next one will be in red..

/Janne
www.sfe.se

Update 1:
It has been crazy last days. I have got allot of questions regarding details, construction and software setup. I’ll do a better page as soon… or I build the Red Helmer II :) Would be fun to use the AMD 16 core Bulldozer cpu x 6 = 96 core in a box :) ))

If a hardware manufacturer/pr-guy happened to read this. I’m very happy to receive hardware play around with ;)

Update 2:
It has happened! I filled the ram, and all boards begun to swap. During this the power consumption was up to 800W. Running now a while, I noticed that H1 board (bottom one) gets hotter than the other boards. I think this is because the other boards are cooled from the fan below also.

Update 3:
Well, genral planning and webpage have begun on Red Helmer II – thank you Google :)

Update 4:
First alternative hardware for Red Helmer is selected, and will do about 12Tflops. (64x times faster then Helmer 1) and cost about the same :) Stay tuned for more!

Update 5:
A hardware god may help me, and then Helmer II will do about 50 TFLOPS!!!! please please, may the force be with me :)

Some design test of Helmer II here

Helmer Data Sheet

More Helmer pics here

Get the Helmer desktop image!

Some render tests result here:
The storming sea scene file 24 frames in resolution 4000×4000 pixels.
- On a MacPro 2 x DualCore Xenon 2.66 Ghz with 4 GB ram
took 552 minutes (9.2 h)

- Helmer did same 24 frames in 4k format in 64 min.

Some approximate numbers give Helmer a floating point capacity of 186 Gflops

Here is the scale of Helmer (about 2,5 foot high:)

My other life-hacks are here:
Building a wind sensor from a PS2-mouse
Building a small linux robot
Building a underwater camera house
Building a solar powered UAV

A better spelled version of ths page is here (by Dan – Thanks:)

Some example of rendered frames here.

相关博文

]]> http://jimey.com/2008/10/14/diy-filing-cabinet-linux-server-cluster.html/feed 0 Synchronized Multimedia Integration Language (SMIL 2.1) http://jimey.com/2008/09/08/synchronized-multimedia-integration-language-smil-2-1.html http://jimey.com/2008/09/08/synchronized-multimedia-integration-language-smil-2-1.html#comments Mon, 08 Sep 2008 11:47:25 +0000 jimey http://jimey.cn/2008/09/08/synchronized-multimedia-integration-language-smil-21/ W3C Candidate Recommendation 13 May 2005
This version:
http://www.w3.org/TR/2005/CR-SMIL2-20050513/
Latest SMIL 2 version:
http://www.w3.org/TR/SMIL2/
Latest SMIL Recommendation:
http://www.w3.org/TR/SMIL/
Previous version:
http://www.w3.org/TR/2005/WD-SMIL2-20050201/
Editors:
Dick Bulterman, CWI – Guido Grassel, Nokia – Jack Jansen, CWI – Antti Koivisto, Nokia – Nabil Layaïda, INRIA – Thierry Michel, W3C – Sjoerd Mullender, CWI – Daniel Zucker, Access Co., Ltd.

This document is also available in these non-normative formats: single HTML file, zip archive.

Copyright ©2005 W3C® (MIT, ERCIM, Keio), All Rights Reserved. W3C liability, trademark and document use rules apply.

相关博文

]]> http://jimey.com/2008/09/08/synchronized-multimedia-integration-language-smil-2-1.html/feed 0 Scrum,软件开发流程之一 http://jimey.com/2008/09/07/scrum-one-of-the-software-development-process.html http://jimey.com/2008/09/07/scrum-one-of-the-software-development-process.html#comments Sun, 07 Sep 2008 12:42:11 +0000 jimey http://jimey.cn/2008/09/07/scrum/ Scrum (英式橄榄球争球队), 软件开发模型是敏捷开发的一种，在最近的一两年内逐渐流行起来。
Scrum的基本假设是：
开发软件就像开发新产品，无法一开始就能定义软件产品最终的规程，过程中需要研发、创意、尝试错误，所以没有一种固定的流程可以保证专案成功。Scrum 将软件开发团队比拟成橄榄球队，有明确的最高目标，熟悉开发流程中所需具备的最佳典范与技术，具有高度自主权，紧密地沟通合作，以高度弹性解决各种挑战，确保每天、每个阶段都朝向目标有明确的推进。

Scrum 开发流程通常以 30 天(或者更短的一段时间)为一个阶段，由客户提供新产品的需求规格开始，开发团队与客户于每一个阶段开始时挑选该完成的规格部分，开发团队必须尽力于 30 天后交付成果，团队每天用 15 分钟开会检查每个成员的进度与计划，了解所遭遇的困难并设法排除。

二 Scrum较传统开发模型的优点
Scrum模型的一个显著特点就是响应变化，它能够尽快地响应变化。下面的图片使用传统的软件开发模型(瀑布模型、螺旋模型或迭代模型)。随着系统因素（内部和外部因素）的复杂度增加，项目成功的可能性就迅速降低。
下图是Scrum模型和传统模型的对比：

三 Scrum模型
一) 有关Scrum的几个名词

backlog: 可以预知的所有任务，包括功能性的和非功能性的所有任务。
sprint:一次跌代开发的时间周期，一般最多以30天为一个周期.在这段时间内，开发团队需要完成一个制定的backlog,并且最终成果是一个增量的，可以交付的产品。
sprint backlog:一个sprint周期内所需要完成的任务。
scrumMaster: 负责监督整个Scrum进程，修订计划的一个团队成员。
time-box: 一个用于开会时间段。比如每个daily scrum meeting的time-box为15分钟。
sprint planning meeting: 在启动每个sprint前召开。一般为一天时间（8小时）。该会议需要制定的任务是：产品Owner和团队成员将backlog分解成小的功能模块, 决定在即将进行的sprint里需要完成多少小功能模块，确定好这个Product Backlog的任务优先级。另外，该会议还需详细地讨论如何能够按照需求完成这些小功能模块。制定的这些模块的工作量以小时计算。

Daily Scrum meeting：开发团队成员召开，一般为15分钟。每个开发成员需要向ScrumMaster汇报三个项目：今天完成了什么？ 是否遇到了障碍？ 即将要做什么？通过该会议，团队成员可以相互了解项目进度。

Sprint review meeting：在每个Sprint结束后，这个Team将这个Sprint的工作成果演示给Product Owner和其他相关的人员。一般该会议为４小时。

Sprint retrospective meeting：对刚结束的Sprint进行总结。会议的参与人员为团队开发的内部人员。一般该会议为３小时。

二）实施Scrum的过程简单介绍
1) 将整个产品的backlog分解成Sprint Backlog,这个Sprint Backlog是按照目前的人力物力条件可以完成的。
2) 召开sprint planning meeting，划分，确定这个Sprint内需要完成的任务，标注任务的优先级并分配给每个成员。注意这里的任务是以小时计算的，并不是按人天计算。
3) 进入sprint开发周期，在这个周期内，每天需要召开Daily Scrum meeting。
4) 整个sprint周期结束，召开Sprint review meeting，将成果演示给Product Owner.
5) 团队成员最后召开Sprint retrospective meeting，总结问题和经验。
6) 这样周而复始，按照同样的步骤进行下一次Sprint.

相关博文

]]> http://jimey.com/2008/09/07/scrum-one-of-the-software-development-process.html/feed 0 Buildbot http://jimey.com/2008/09/07/buildbot.html http://jimey.com/2008/09/07/buildbot.html#comments Sun, 07 Sep 2008 07:36:29 +0000 jimey http://jimey.cn/2008/09/07/buildbot/ The is a system to automate the compile/test cycle required by most software projects to validate code changes. By automatically rebuilding and testing the tree each time something has changed, build problems are pinpointed quickly, before other developers are inconvenienced by the failure. The guilty developer can be identified and harassed without human intervention. By running the builds on a variety of platforms, developers who do not have the facilities to test their changes everywhere before checkin will at least know shortly afterwards whether they have broken the build or not. Warning counts, lint checks, image size, compile time, and other build parameters can be tracked over time, are more visible, and are therefore easier to improve.

The overall goal is to reduce tree breakage and provide a platform to run tests or code-quality checks that are too annoying or pedantic for any human to waste their time with. Developers get immediate (and potentially public) feedback about their changes, encouraging them to be more careful about testing before checkin.

sample:http://build.chromium.org/buildbot/waterfall/

无关博文

]]> http://jimey.com/2008/09/07/buildbot.html/feed 0 推荐一款免费杀毒软件알약 http://jimey.com/2008/08/25/recommend-a-free-anti-virus-software-%ec%95%8c%ec%95%bd.html http://jimey.com/2008/08/25/recommend-a-free-anti-virus-software-%ec%95%8c%ec%95%bd.html#comments Mon, 25 Aug 2008 02:22:39 +0000 jimey http://jimey.cn/2008/08/25/%e6%8e%a8%e8%8d%90%e4%b8%80%e6%ac%be%e5%85%8d%e8%b4%b9%e6%9d%80%e6%af%92%e8%bd%af%e4%bb%b6%ec%95%8c%ec%95%bd/ 下载地址

http://alyac.altools.co.kr/Main/Person.aspx

页面中Download处

全免费,altools出品 altools的产品貌似都是免费的，靠广告来维持收入

这款杀毒软件虽然免费，至少让我用起来很爽。中文系统安装虽然乱码，但是照杀不误，每隔几天睡觉之前扫描一次系统，昨晚睡觉之前扫描了一次，今早起来看发现中了9个-_- 通通杀掉

相关博文

]]> http://jimey.com/2008/08/25/recommend-a-free-anti-virus-software-%ec%95%8c%ec%95%bd.html/feed 0 近期安装软件 http://jimey.com/2008/07/16/the-recent-installation-of-software.html http://jimey.com/2008/07/16/the-recent-installation-of-software.html#comments Mon, 29 Nov 1999 16:00:00 +0000 jimey http://jimey.s216.sureserver.com/blog/index.php/2008/07/16/%e8%bf%91%e6%9c%9f%e5%ae%89%e8%a3%85%e8%bd%af%e4%bb%b6/ QualNet 4.5 安装需要Java和C++环境支持

系统已经安装VS2008，但是由于QualNet 4.5 Developer Command-Line 打开后无法使用nmake

无奈把系统重新安装，又安装VS2008，依然无法使用nmake，无奈删除VS2008又安装VS2005，依然无法使用。

搜索到QualNet-4.5-InstallationGuide.pdf发现

Start > All Programs > Visual C++ 2005 Express Edition > Visual Studio Tools > Visual Studio 2005 Command Prompt

直接用VS2008命令行也可以安装，于是搞定之

————————————————————————————————

下午由于日程安排太多，找了个便签软件，搜索了下好几个人提到了ATnotes，于是安装之，发现还算好用。

取英文词实在太不方便，之前都是复制了再去dict.cn查，稍微耗费了点时间，找了下，可以直接浮动查词，并且免费的有谷歌金山词霸，于是安装之。

结果还是不能取pdf的词，仔细看了说明才发现，可以取adobe reader打开的pdf的词，但是professional版本就无法取词，无奈又安装了reader版……，终于可以使用。

——————————————————

update: 发现professional也可以用了，把PowerWord Lite\addins中的xdict32-google复制到adobe的plus_in文件夹即可&……

相关博文

]]> http://jimey.com/2008/07/16/the-recent-installation-of-software.html/feed 0 IEEE format http://jimey.com/2008/07/16/ieee-format.html http://jimey.com/2008/07/16/ieee-format.html#comments Mon, 29 Nov 1999 16:00:00 +0000 jimey http://jimey.s216.sureserver.com/blog/index.php/2008/07/16/ieee-format/ Format: The papers submitted for review must be in the format (8.5″ x 11″, two-column). Please strictly follow the formatting instructions (read the instructions in PDF, DOC) and layout instructions (read the instructions in PDF, DOC; see also the CS Author Resources page).

相关博文

]]> http://jimey.com/2008/07/16/ieee-format.html/feed 0 Port Requirements for the Microsoft Windows Server System http://jimey.com/2006/12/08/port-requirements-for-the-microsoft-windows-server-system.html http://jimey.com/2006/12/08/port-requirements-for-the-microsoft-windows-server-system.html#comments Fri, 08 Dec 2006 08:58:02 +0000 jimey http://my.donews.com/jimey/2006/12/08/EqGuEIyeASLhRjJsjjtYMqFQNFAWOmdsDJNh/ IN THIS TASK
SUMMARY
Overview
System Services Ports
Ports and Protocols
REFERENCES
SUMMARY
This article discusses the network ports and protocols that are used by products and their subcomponents in the Microsoft Windows system.

The Windows system includes a comprehensive and integrated infrastructure that is designed to meet the requirements of developers and of information technology (IT) professionals. This system is designed to run programs and solutions that information workers can use to obtain, to analyze, and to share information quickly and easily. These Microsoft products use a variety of network ports and protocols to communicate with client systems and with other systems over the network. Dedicated firewalls, host-based firewalls, and Internet Protocol security (IPSec) filters are other important components that are required to help secure your network. However, if these technologies are configured to block ports and protocols that are used by a specific , that will no longer respond to client requests.

back to the top
Overview
The following list provides an overview of the information that this article contains:
The “System Services Ports” section of this article contains a brief description of each service, displays the logical name of that service, and indicates the ports and protocols that each service requires for correct operation. Use this section to help identify the ports and protocols that a particular service uses.
The “Ports and Protocols” section of this article includes a table that summarizes the information from the “System Services Ports” section. The table is sorted by port number instead of by the service name. Use this section to quickly determine which services listen on a particular port.
This article uses certain terms in specific ways. To help avoid confusion, make sure that you understand how this document uses these terms. The following list describes these terms:
System services: The Windows system includes many products, such as the Microsoft Windows 2003 family, Microsoft Exchange 2000 , and Microsoft SQL 2000. Each of these products include many components; system services is one of those components. System services that are required by a particular computer are either started automatically by the operating system during startup or are started as required during typical operations. For example, some system services that are available on computers that are running Windows 2003, Enterprise Edition, include the service, the Print Spooler service, and the World Wide Web Publishing Service. Each system service has a friendly service name and a service name. The friendly service name is the name that appears in graphical management tools such as the Services Microsoft Management Console (MMC) snap-in. The service name is the name that is used with command-line tools and with many scripting languages. Each system service may provide one or more network services.
Application protocol: In the context of this article, an application protocol is a high-level network protocol that uses one or more TCP/IP protocols and ports. Examples of application protocols include Hypertext Transfer Protocol (HTTP), message blocks (SMBs), and Simple Mail Transfer Protocol (SMTP).
Protocol: Operating at a lower level than the application protocols, TCP/IP protocols are standard formats for communicating between devices on a network. The TCP/IP suite of protocols includes TCP, User Datagram Protocol (UDP), and Internet Control Message Protocol (ICMP).
Port: This is the network port that the system service listens on for incoming network traffic.
This article does not specify which services rely on other services for network communication. For example, many services rely on the remote procedure call (RPC) or DCOM features in Microsoft Windows to assign them dynamic TCP ports. The Remote Procedure Call service coordinates requests by other system services that use RPC or DCOM to communicate with client computers. Many other services rely on network basic input/output system (NetBIOS) or SMBs, protocols that are actually provided by the service. Others rely on HTTP or on Hypertext Transfer Protocol Secure (HTTPS). These protocols are provided by Internet Information Services (IIS). A full discussion of the architecture of the Windows operating systems is beyond the scope of this article. However, detailed documentation on this subject is available on Microsoft TechNet and on the Microsoft Developer Network (MSDN). While many services may rely on a particular TCP or UDP port, only a single service or process can be actively listening on that port at any one time.

When you use RPC with TCP/IP or with UDP/IP as the transport, inbound ports are frequently dynamically assigned to system services as required; TCP/IP and UDP/IP ports that are higher than port 1024 are used. These are frequently informally referred to as “random RPC ports.” In these cases, RPC clients rely on the RPC endpoint mapper to tell them which dynamic port(s) were assigned to the . For some RPC-based services, you can configure a specific port instead of letting RPC assign one dynamically. You can also restrict the range of ports that RPC dynamically assigns to a small range, regardless of the service. For more information about this topic, see the “References” section of this article.

This article includes information about the system services roles and the roles for the Microsoft products that are listed in the “Applies to” section at the end of this article. While this information may also apply to Microsoft Windows XP and to Microsoft Windows 2000 Professional, this article is intended to focus on -class operating systems. Because of this, this article describes the ports that a service listens on instead of the ports that client programs use to connect to a remote system.

back to the top
System Services Ports
This section provides a description of each system service, includes the logical name that corresponds to the system service, and displays the ports and the protocols that each service requires.
Application Layer Gateway Service
This subcomponent of the Internet Connection Sharing (ICS)/Internet Connection Firewall (ICF) service provides support for plug-ins that allow network protocols to pass through the firewall and work behind Internet Connection Sharing. Application Layer Gateway (ALG) plug-ins can open ports and change data (such as ports and IP addresses) that are embedded in packets. File Transfer Protocol (FTP) is the only network protocol with a plug-in that is included with Windows 2003, Standard Edition, and Windows 2003, Enterprise Edition. The ALG FTP plug–in is designed to support active FTP sessions through the network address translation (NAT) engine that these components use. The ALG FTP plug–in supports these sessions by redirecting all traffic that passes through the NAT and that is destined for port 21 to a private listening port in the range of 3000 to 5000 on the loopback adapter. The ALG FTP plug–in then monitors and updates FTP control channel traffic so that the FTP plug-in can forward port mappings through the NAT for the FTP data channels. The FTP plug–in also updates ports in the FTP control channel stream.

System service name: ALG Application protocol Protocol Ports
FTP control TCP 21

ASP.NET State Service
ASP.NET State Service provides support for ASP.NET out-of-process session states. ASP.NET State Service stores session data out-of-process. The service uses sockets to communicate with ASP.NET that is running on a Web .

System service name: aspnet_state Application protocol Protocol Ports
ASP.NET Session State TCP 42424

Certificate Services
Certificate Services is part of the core operating system. By using Certificate Services, a business can act as its own certification authority (CA). In this way, the business can issue and manage digital certificates for programs and protocols such as Secure/Multipurpose Internet Mail Extensions (S/MIME), Secure Sockets Layer (SSL), Encrypting File System (EFS), IPSec, and smart card logon. Certificate Services relies on RPC and on DCOM to communicate with clients by using random TCP ports that are higher than port 1024.

System service name: CertSvc Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Service
The service controls operations and manages the database. A is a collection of independent computers that act as a single computer. Managers, programmers, and users see the as a single system. The software distributes data among the nodes of the . If a node fails, other nodes provide the services and data that was formerly provided by the missing node. When a node is added or repaired, the software migrates some data to that node.

System service name: ClusSvc Application protocol Protocol Ports
Services UDP 3343
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Computer Browser
The Computer Browser system service maintains an up-to-date list of computers on your network and supplies the list to programs that request it. The Computer Browser service is used by Windows-based computers to view network domains and resources. Computers that are designated as browsers maintain browse lists that contain all shared resources that are used on the network. Earlier versions of Windows programs, such as My Network Places, the net view command, and Windows Explorer, all require browsing capability. For example, when you open My Network Places on a computer that is running Microsoft Windows 95, a list of domains and computers appears. To display this list, the computer obtains a copy of the browse list from a computer that is designated as a browser.

System service name: Browser Application protocol Protocol Ports
NetBIOS Datagram Service UDP 138
NetBIOS Name Resolution UDP 137
NetBIOS Session Service TCP 139

DHCP
The DHCP service uses the Dynamic Host Configuration Protocol (DHCP) to automatically allocate IP addresses. By using this service, you can adjust the advanced network settings of DHCP clients. For example, you can configure network settings such as Domain Name System (DNS) servers and Windows Internet Name Service (WINS) servers. You can establish one or more DHCP servers to maintain TCP/IP configuration information and to provide that information to client computers.

System service name: DHCPServer Application protocol Protocol Ports
DHCP UDP 67
MADCAP UDP 2535

Distributed File System
The Distributed File System (DFS) service manages logical volumes that are distributed across a local area network (LAN) or wide area network (WAN) and is required for the Microsoft Active Directory directory service SYSVOL share. DFS is a distributed service that integrates disparate file shares into a single logical namespace.

System service name: Dfs Application protocol Protocol Ports
NetBIOS Datagram Service UDP 138
NetBIOS Session Service TCP 139
LDAP TCP 389
LDAP UDP 389
SMB TCP 445
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Distributed Link Tracking
The Distributed Link Tracking system service stores information so that files that are moved between volumes can be tracked to each volume in the domain. The Distributed Link Tracking service runs on each domain controller in a domain. This service enables the Distributed Link Tracking Client service to track linked documents that have been moved to a location in another NTFS file system volume in the same domain.

System service name: TrkSvr Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Distributed Transaction Coordinator
The Distributed Transaction Coordinator (DTC) system service is responsible for coordinating transactions that are distributed across multiple computer systems and resource managers, such as databases, message queues, file systems, or other transaction-protected resource managers. The DTC system service is required if transactional components are configured through COM+. It is also required for transactional queues in Message Queuing (also known as MSMQ) and SQL operations that span multiple systems.

System service name: MSDTC Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

DNS
The DNS service enables DNS name resolution by answering queries and update requests for DNS names. DNS servers are required to locate devices and services that are identified by using DNS names and to locate domain controllers in Active Directory.

System service name: DNS Application protocol Protocol Ports
DNS UDP 53
DNS TCP 53

Event Log
The Event Log system service logs event messages that are generated by programs and by the Windows operating system. Event Log reports contain information that can be useful in diagnosing problems. Reports are viewed in Event Viewer. The Event Log service writes events that are sent by programs, by services, and by the operating system to log files. The events contain diagnostic information in addition to errors that are specific to the source program, the service, or the component. The logs can be viewed programmatically through the event log APIs or through the Event Viewer in an MMC snap-in.

System service name: Eventlog Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Exchange
Microsoft Exchange includes several system services. When a MAPI client, such as Microsoft Outlook, connects to an Exchange , the client first connects to the RPC endpoint mapper (the RPC Locator Service) on TCP port 135. The RPC endpoint mapper tells the client what ports to use to connect to the Exchange service. These ports are dynamically assigned. Microsoft Exchange 5.5 uses two ports: one for the information store and one for the directory. Microsoft Exchange 2000 and Microsoft Exchange 2003 use three ports: one for the information store and two for the system attendant. You can also use Microsoft Office Outlook 2003 to connect to servers that are running Exchange 2003 by using RPC over HTTP. Exchange can also provide support for other protocols, such as SMTP, Post Office Protocol 3 (POP3), and IMAP.

Application protocol Protocol Ports
IMAP TCP 143
IMAP over SSL TCP 993
POP3 TCP 110
POP3 over SSL TCP 995
Randomly allocated high TCP ports TCP random port number
RPC TCP 135
RPC over HTTP TCP 593
SMTP TCP 25
SMTP UDP 25

Fax Service
Fax Service, a Telephony API (TAPI)–compliant system service, provides fax capabilities. By using Fax Service, users can send and receive faxes from their desktop programs by using either a local fax device or a shared network fax device.

System service name: Fax Application protocol Protocol Ports
NetBIOS Session Service TCP 139
RPC TCP 135
Randomly allocated high TCP ports TCP random port number
SMB TCP 445

File Replication
The File Replication service (FRS) allows files to be automatically copied and maintained on many servers at the same time. FRS is the automatic file replication service in Windows 2000 and in Windows 2003. Its function is to replicate the SYSVOL share to all domain controllers. Additionally, you can configure FRS to replicate files among alternate targets that are associated with the fault-tolerant DFS.

System service name: NtFrs Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

File for Macintosh
By using the File for Macintosh system service, Macintosh computer users can store and access files on a computer that is running Windows 2003. If this service is turned off or blocked, Macintosh clients cannot access or store files on that computer.

System service name: MacFile Application protocol Protocol Ports
File for Macintosh TCP 548

FTP Publishing Service
FTP Publishing Service provides FTP connectivity. By default, the FTP control port is 21. However, you can configure this system service through the Internet Information Services (IIS) Manager snap-in. The default data (that is used for active mode FTP) port is automatically set to one port less than the control port. Therefore, if you configure the control port to port 4131, the default data port is port 4130. Most FTP clients use passive mode FTP. This means that the client initially connects to the FTP by using the control port, the FTP assigns a high TCP port between ports 1025 and 5000, and then the client opens a second connection to the FTP for transferring data. You can configure the range of high ports by using the IIS metabase.

System service name: MSFTPSVC Application protocol Protocol Ports
FTP control TCP 21
FTP default data TCP 20
Randomly allocated high TCP ports TCP random port number

HTTP SSL
The HTTP SSL system service enables IIS to perform SSL functions. SSL is an open standard for establishing an encrypted communications channel to help prevent the interception of critical information, such as credit card numbers. Although this service is designed to work on other Internet services, it is primarily used to enable encrypted electronic financial transactions on the World Wide Web (WWW). You can configure the ports for this service through the Internet Information Services (IIS) Manager snap-in.

System service name: HTTPFilter Application protocol Protocol Ports
HTTPS TCP 443

Internet Authentication Service
Internet Authentication Service (IAS) performs centralized authentication, authorization, auditing, and accounting of users who are connecting to a network. These users can be on a LAN connection or on a remote connection. IAS implements the Internet Engineering Task Force (IETF) standard Remote Authentication Dial-In User Service (RADIUS) protocol.

System service name: IAS Application protocol Protocol Ports
Legacy RADIUS UDP 1645
Legacy RADIUS UDP 1646
RADIUS Accounting UDP 1813
RADIUS Authentication UDP 1812

Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS)
This system service provides NAT, addressing, and name resolution services for all computers on your home network or your small-office network. When the Internet Connection Sharing feature is enabled, your computer becomes an “Internet gateway” on the network, and other client computers can then share one connection to the Internet, such as a dial-up connection or a broadband connection. This service provides basic DHCP and DNS services but will work with the full-featured Windows DHCP or DNS services. When ICF and Internet Connection Sharing act as a gateway for the rest of the computers on your network, they provide DHCP and DNS services to the private network on the internal network interface. They do not provide these services on the external-facing interface.

System service name: SharedAccess Application protocol Protocol Ports
DHCP UDP 67
DNS UDP 53
DNS TCP 53

Kerberos Key Distribution Center
When you use the Kerberos Key Distribution Center (KDC) system service, users can log on to the network by using the Kerberos version 5 authentication protocol. As in other implementations of the Kerberos protocol, the KDC is a single process that provides two services: the Authentication Service and the Ticket-Granting Service. The Authentication Service issues ticket granting tickets, and the Ticket-Granting Service issues tickets for connection to computers in its own domain.

System service name: kdc Application protocol Protocol Ports
Kerberos TCP 88
Kerberos UDP 88

License Logging
The License Logging system service is a tool that was originally designed to help customers manage licenses for Microsoft products that are licensed in the Client Access License (CAL) model. License Logging was introduced with Microsoft Windows NT 3.51. By default, the License Logging service is disabled in Windows 2003. Because of original design constraints and evolving license terms and conditions, License Logging may not provide an accurate view of the total number of CALs that are purchased compared to the total number of CALs that are used on a particular or across the enterprise. The CALs that are reported by License Logging may conflict with the interpretation of the End-User License Agreement (EULA) and with Product Use Rights (PUR). License Logging will not be included in future versions of the Windows operating system. Microsoft recommends that only users of the Microsoft Small Business family of operating systems enable this service on their servers.

System service name: LicenseService Application protocol Protocol Ports
NetBIOS Datagram Service UDP 138
NetBIOS Session Service TCP 139
SMB TCP 445

Local Security Authority
The Local Security Authority (LSASS) service provides core operating system security mechanisms. The service uses random TCP ports that are assigned through the RPC service for domain controller replication. Although LSASS can use all the following protocols, it may use only a subset of them. For example, if you configure a VPN gateway that lies behind a filtering router, you might use Layer 2 Tunneling Protocol (L2TP) together with IPSec. In this scenario, you must allow IPSec Encapsulating Security Protocol (ESP) (IP protocol 50), IPSec Network Address Translator Traversal NAT-T (UDP port 4500), and IPSec Internet Security Association and Key Management Protocol (ISAKMP) (UDP port 500) through the router.

NotePacket filters for L2TP traffic are not required, because L2TP is protected by IPSec ESP.

System service name: LSASS Application protocol Protocol Ports
Global Catalog TCP 3269
Global Catalog TCP 3268
LDAP TCP 389
LDAP UDP 389
LDAP SSL TCP 636
LDAP SSL UDP 636
IPSec ISAKMP UDP 500
NAT-T UDP 4500
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Message Queuing
The Message Queuing system service is a messaging infrastructure and development tool for creating distributed messaging programs for Windows. These programs can communicate across heterogeneous networks and can send messages between computers that may be temporarily unable to connect to each other. Message Queuing helps provide security, efficient routing, support for sending messages within transactions, priority-based messaging, and guaranteed message delivery.

System service name: MSMQ Application protocol Protocol Ports
MSMQ TCP 1801
MSMQ UDP 1801
MSMQ-DCs TCP 2101
MSMQ-Mgmt TCP 2107
MSMQ-Ping UDP 3527
MSMQ-RPC TCP 2105
MSMQ-RPC TCP 2103
RPC TCP 135

Messenger
The Messenger system service sends messages to or receives messages from users and computers, administrators, and the Alerter service. This service is not related to Windows Messenger. If you disable the Messenger service, notifications that are sent to computers or users who are currently logged on the network are not received. Additionally, the net send command and the net name command no longer function.

System service name: Messenger Application protocol Protocol Ports
NetBIOS Datagram Service UDP 138

Microsoft Exchange MTA Stacks
In Microsoft Exchange 2000 and Microsoft Exchange 2003, the Message Transfer Agent (MTA) is frequently used to provide backward-compatible message transfer services between Exchange 2000 -based servers and Exchange 5.5-based servers in a mixed-mode environment.

System service name: MSExchangeMTA Application protocol Protocol Ports
X.400 TCP 102

Microsoft Operations Manager 2000
Microsoft Operations Manager (MOM) 2000 delivers enterprise-class operations management by providing comprehensive event management, proactive monitoring and alerting, reporting, and trend analysis. After you install MOM 2000 Service Pack 1 (SP1), MOM 2000 no longer uses a clear text communications channel, and all traffic between the MOM agent and the MOM is encrypted over TCP port 1270. The MOM Administrator console uses DCOM to connect to the . This means that administrators who manage the MOM over the network must have access to random high TCP ports.

System service name: one point Application protocol Protocol Ports
MOM-Clear TCP 51515
MOM-Encrypted TCP 1270

Microsoft POP3 Service
Microsoft POP3 Service provides e-mail transfer and retrieval services. Administrators can use this service to store and manage e-mail accounts on the mail . When you install Microsoft POP3 Service on the mail , users can connect to the mail and can retrieve e-mail by using an e-mail client that supports the POP3 protocol, such as Microsoft Outlook.

System service name: POP3SVC Application protocol Protocol Ports
POP3 TCP 110

MSSQLSERVER
MSSQLSERVER is a system service in Microsoft SQL 2000. SQL provides a powerful and comprehensive data management platform. You can configure the ports that each instance of SQL uses by using the Network Utility.

System service name: MSSQLSERVER Application protocol Protocol Ports
SQL over TCP TCP 1433
SQL Probe UDP 1434

MSSQL$UDDI
The MSSQL$UDDI system service is installed during the installation of the Universal Description, Discovery, and Integration (UDDI) feature of the Windows 2003 family of operating systems. MSSQL$UDDI provides UDDI capabilities in an enterprise. The SQL database engine is the core component of MSSQL$UDDI.

System service name: MSSQLSERVER Application protocol Protocol Ports
SQL over TCP TCP 1433
SQL Probe UDP 1434

Net Logon
The Net Logon system service maintains a security channel between your computer and the domain controller to authenticate users and services. It passes the user’s credentials to a domain controller and returns the domain security identifiers and user rights for the user. This is typically referred to as pass-through authentication. Net Logon starts automatically when the computer is a member of a domain. In the Windows 2000 and Windows 2003 families, Net Logon publishes service resource records in the DNS. Net Logon is only enabled on computers that belong to a domain. When this service runs, it relies on the service and on the Local Security Authority service to listen for incoming requests. On domain member computers, Net Logon uses RPC over named pipes. On domain controllers, it uses RPC over named pipes, RPC over TCP/IP, mailslots, and Lightweight Directory Access Protocol (LDAP).

System service name: Netlogon Application protocol Protocol Ports
NetBIOS Datagram Service UDP 138
NetBIOS Name Resolution UDP 137
NetBIOS Session Service TCP 139
SMB TCP 445

NetMeeting Remote Desktop Sharing
The NetMeeting Remote Desktop Sharing system service allows authorized users to remotely access your Windows desktop from another personal computer over a corporate intranet by using Windows NetMeeting. You must explicitly enable this service in NetMeeting. You can disable or shut down this feature by using an icon in the Windows notification area.

System service name: mnmsrvc Application protocol Protocol Ports
Terminal Services TCP 3389

Network News Transfer Protocol (NNTP)
The Network News Transfer Protocol (NNTP) system service allows computers that are running Windows 2003 to act as news servers. Clients can use a news client, such as Microsoft Outlook Express, to retrieve newsgroups from the and to read the headers or the bodies of the articles in each newsgroup.

System service name: NNTPSVC Application protocol Protocol Ports
NNTP TCP 119
NNTP over SSL TCP 563

Performance Logs and Alerts
The Performance Logs and Alerts system service collects, based on preconfigured schedule parameters, performance data from local or remote computers and then writes that data to a log or triggers a message. Based on the information that is contained in the named log collection setting, the Performance Logs and Alerts service starts and stops each named performance data collection. This service only runs if at least one performance data collection is scheduled.

System service name: SysmonLog Application protocol Protocol Ports
NetBIOS Session Service TCP 139

Print Spooler
The Print Spooler system service manages all local and network print queues and controls all print jobs. Print Spooler is the center of the Windows printing subsystem. It manages the print queues on the system and communicates with printer drivers and input/output (I/O) components, such as the USB port and the TCP/IP protocol suite.

System service name: Spooler Application protocol Protocol Ports
NetBIOS Session Service TCP 139
SMB TCP 445

Remote Installation
You can use the Remote Installation system service to install Windows 2000, Windows XP, and Windows 2003 on Pre-Boot eXecution Environment (PXE) remote boot-enabled client computers. The Boot Information Negotiation Layer (BINL) service, the primary component of Remote Installation (RIS), answers PXE client requests, checks Active Directory for client validation, and passes client information to and from the . The BINL service is installed when you either add the RIS component from Add/Remove Windows Components, or select it when you initially install the operating system.

System service name: BINLSVC Application protocol Protocol Ports
BINL UDP 4011

Remote Procedure Call (RPC)
The Remote Procedure Call (RPC) system service is an interprocess communication (IPC) mechanism that enables data exchange and invocation of functionality that reside in a different process. The different process can be on the same computer, on the LAN, or in a remote location, and can be accessed over a WAN connection or over a VPN connection. The RPC service serves as the RPC endpoint mapper and Component Object Model (COM) Service Control Manager. Many services depend on the RPC service to start successfully.

System service name: RpcSs Application protocol Protocol Ports
RPC TCP 135
RPC over HTTP TCP 593

Remote Procedure Call (RPC) Locator
The Remote Procedure Call (RPC) Locator system service manages the RPC name service database. When this service is turned on, RPC clients can locate RPC servers. This service is turned off by default.

System service name: RpcLocator Application protocol Protocol Ports
NetBIOS Session Service TCP 139
SMB TCP 445

Remote Storage Notification
The Remote Storage Notification system service notifies users when they read from or write to files that are only available from a secondary storage media. Stopping this service prevents this notification.

System service name: Remote_Storage_User_Link Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Remote Storage
The Remote Storage system service stores infrequently used files on a secondary storage medium. If you stop this service, users cannot move or retrieve files from the secondary storage media.

System service name: Remote_Storage_Server Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Routing and Remote Access
The Routing and Remote Access service provides multiprotocol LAN-to-LAN, LAN-to-WAN, VPN, and NAT routing services. Additionally, the Routing and Remote Access service also provides dial-up and VPN remote access services. Although Routing and Remote Access can use all the following protocols, the service typically uses only a subset of them. For example, if you configure a VPN gateway that lies behind a filtering router, you will probably use only one technology. If you use L2TP with IPSec, you must allow IPSec ESP (IP protocol 50), NAT-T (TCP on port 4500), and IPSec ISAKMP (TCP on port 500) through the router.

Note Although NAT-T and IPSec ISAKMP are required for L2TP, these ports are actually monitored by the Local Security Authority. For additional information about this, see the “References” section of this article.

System service name: RemoteAccess Application protocol Protocol Ports
GRE (IP protocol 47) GRE n/a
IPSec AH (IP protocol 51) AH n/a
IPSec ESP (IP protocol 50) ESP n/a
L2TP UDP 1701
PPTP TCP 1723


The system service provides RPC support and file, print, and named pipe sharing over the network. The service allows the sharing of local resources, such as disks and printers, so that other users on the network can access them. It also allows named pipe communication between programs that are running on the local computer and on other computers. Named pipe communication is memory that is reserved for the output of one process to be used as input for another process. The input-accepting process does not have to be local to the computer.

System service name: lanmanserver Application protocol Protocol Ports
NetBIOS Datagram Service UDP 138
NetBIOS Name Resolution UDP 137
NetBIOS Session Service TCP 139
SMB TCP 445

SharePoint Portal
With the SharePoint Portal system service, you can develop an intelligent portal that seamlessly connects users, teams, and knowledge so that people can take advantage of relevant information across business processes. Microsoft SharePoint Portal 2003 provides an enterprise business solution that integrates information from various systems into one solution through single sign-on and enterprise application integration capabilities.

Application protocol Protocol Ports
HTTP TCP 80
HTTPS TCP 443

Simple Mail Transfer Protocol (SMTP)
The Simple Mail Transfer Protocol (SMTP) system service is an e-mail submission and relay agent. It accepts and queues e-mail for remote destinations, and it retries at specified intervals. Windows domain controllers use the SMTP service for intersite e-mail-based replication. The Collaboration Data Objects (CDO) for the Windows 2003 COM component can use the SMTP service to submit and to queue outbound e-mail.

System service name: SMTPSVC Application protocol Protocol Ports
SMTP TCP 25
SMTP UDP 25

Simple TCP/IP Services
Simple TCP/IP Services implements support for the following protocols:
Echo, port 7, RFC 862
Discard, port 9, RFC 863
Character Generator, port 19, RFC 864
Daytime, port 13, RFC 867
Quote of the Day, port 17, RFC 865
System service name: SimpTcp Application protocol Protocol Ports
Chargen TCP 19
Chargen UDP 19
Daytime TCP 13
Daytime UDP 13
Discard TCP 9
Discard UDP 9
Echo TCP 7
Echo UDP 7
Quotd TCP 17
Quoted UDP 17

SMS Remote Control Agent
SMS Remote Control Agent is a system service in Microsoft Systems Management (SMS) 2003. SMS Remote Control Agent provides a comprehensive solution for change and for configuration management for the Microsoft operating systems. With this solution, organizations can provide relevant software and updates to users.

System service name: Wuser32 Application protocol Protocol Ports
SMS Remote Chat TCP 2703
SMS Remote Chat UDP 2703
SMS Remote Control (control) TCP 2701
SMS Remote Control (control) UDP 2701
SMS Remote Control (data) TCP 2702
SMS Remote Control (data) UDP 2702
SMS Remote File Transfer TCP 2704
SMS Remote File Transfer UDP 2704

SNMP Service
SNMP Service allows incoming Simple Network Management Protocol (SNMP) requests to be serviced by the local computer. SNMP Service includes agents that monitor activity in network devices and report to the network console workstation. SNMP Service provides a method of managing network hosts (such as workstation or computers, routers, bridges, and hubs) from a centrally-located computer that is running network management software. SNMP performs management services by using a distributed architecture of management systems and agents.

System service name: SNMP Application protocol Protocol Ports
SNMP UDP 161

SNMP Trap Service
SNMP Trap Service receives trap messages that are generated by local or by remote SNMP agents and then forwards those messages to SNMP management programs that are running on your computer. SNMP Trap Service, when configured for an agent, generates trap messages if any specific events occur. These messages are sent to a trap destination. For example, an agent can be configured to initiate an authentication trap if an unrecognized management system sends a request for information. Trap destinations include the computer name, the IP address, or the Internetwork Packet Exchange (IPX) address of the management system. The trap destination must be a network-enabled host that is running SNMP management software.

System service name: SNMPTRAP Application protocol Protocol Ports
SNMP Traps Outbound UDP 162

SQL Analysis
The SQL Analysis system service is a component of SQL 2000. With SQL Analysis , you can create and manage OLAP cubes and data mining models. The analysis may access local or remote data sources for creating and storing cubes or data mining models.

Application protocol Protocol Ports
SQL Analysis Services TCP 2725

SQL : Downlevel OLAP Client Support
This system service is used by SQL 2000 when the SQL Analysis service has to support connections from downlevel (OLAP Services 7.0) clients. These are the default ports for OLAP services that are used by SQL 7.0.

Application protocol Protocol Ports
OLAP Services 7.0 TCP 2393
OLAP Services 7.0 TCP 2394

SSDP Discovery Service
SSDP Discovery Service implements Simple Service Discovery Protocol (SSDP) as a Windows service. SSDP Discovery Service manages receipt of device presence announcements, updates its cache, and passes these notifications along to clients with outstanding search requests. SSDP Discovery Service also accepts registration of event callbacks from clients, turns these into subscription requests, and monitors for event notifications. It then passes these requests along to the registered callbacks. This system service also provides hosted devices with periodic announcements. Currently, the SSDP event notification service uses TCP port 5000. Starting with the next Windows XP service pack, it will rely on TCP port 2869.

Note At the time of this writing, the current Windows XP service pack level is Windows XP Service Pack 1 (SP1).

System service name: SSDPRSR Application protocol Protocol Ports
SSDP UDP 1900
SSDP event notification TCP 2869
SSDP legacy event notification TCP 5000

Systems Management 2.0
Microsoft Systems Management (SMS) 2003 provides a comprehensive solution for change and configuration management for Microsoft operating systems. With this solution, organizations can provide relevant software and updates to users quickly and cost-effectively.

Application protocol Protocol Ports
NetBIOS Datagram Service UDP 138
NetBIOS Name Resolution UDP 137
NetBIOS Session Service TCP 139
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

TCP/IP Print
The TCP/IP Print system service enables TCP/IP–based printing by using the Line Printer Daemon (LPD) protocol. The LPD service on the receives documents from Line Printer Remote (LPR) utilities that are running on UNIX computers.

System service name: LPDSVC Application protocol Protocol Ports
LPD TCP 515

Telnet
The Telnet system service for Windows provides ASCII terminal sessions to Telnet clients. A Telnet supports two types of authentication and supports the following four types of terminals:
American National Standards Institute (ANSI)
VT-100
VT-52
VTNT

System service name: TlntSvr Application protocol Protocol Ports
Telnet TCP 23

Terminal Services
Terminal Services provides a multi-session environment that allows client devices to access a virtual Windows desktop session and Windows-based programs that are running on the . Terminal Services allows multiple users to be connected interactively to a computer.

System service name: TermService Application protocol Protocol Ports
Terminal Services TCP 3389

Terminal Services Licensing
The Terminal Services Licensing system service installs a license and provides licenses to registered clients when the clients connect to a terminal (a that has Terminal enabled). Terminal Services Licensing is a low-impact service that stores the client licenses that have been issued for a terminal , and then tracks the licenses that have been issued to client computers or terminals.

System service name: TermServLicensing Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Terminal Services Session Directory
The Terminal Services Session Directory system service allows clusters of load-balanced terminal servers to correctly route a user’s connection request to the where the user already has a session running. Users are routed to the first-available terminal , regardless of whether they are running another session in the . The load-balancing functionality pools the processing resources of several servers by using the TCP/IP networking protocol. You can use this service with a of terminal servers to increase the performance of a single terminal by distributing sessions across multiple servers. Terminal Services Session Directory keeps track of disconnected sessions on the and makes sure that users are reconnected to those sessions.

System service name: Tssdis Application protocol Protocol Ports
RPC TCP 135
Randomly allocated high TCP ports TCP random port number

Trivial FTP Daemon
The Trivial FTP Daemon system service does not require a user name or a password and is an integral part of RIS. The Trivial FTP Daemon service implements support for the Trivial FTP Protocol (TFTP) that is defined by the following RFCs:
RFC 1350 – TFTP
RFC 2347 – Option extension
RFC 2348 – Block size option
RFC 2349 – Timeout interval, and transfer size options

TFTP is a file transfer protocol that is designed to support diskless boot environments. TFTP daemons listen on UDP port 69 but respond from a randomly allocated high port. Therefore, when you enable this port, the TFTP service can receive incoming TFTP requests, but enabling it does not allow the selected to respond to those requests. You must configure the selected to respond from port 69 to allow it to respond to inbound TFTP requests.

System service name: tftpd Application protocol Protocol Ports
TFTP UDP 69

Universal Plug and Play Device Host
The Universal Plug and Play Host discovery system service implements all the components that are required for device registration, control, and the response to events for hosted devices. The information that is registered that pertains to a device (the description, the lifetimes, and the containers) are optionally stored to disk and are announced on the network after registration, or when the operating system restarts. The service also includes the Web that serves the device, in addition to service descriptions and a presentation page.

System service name: UPNPHost Application protocol Protocol Ports
UPNP TCP 2869

Windows Internet Name Service (WINS)
Windows Internet Name Service (WINS) enables NetBIOS name resolution. This service helps you locate network resources by using NetBIOS names. WINS servers are required unless all domains have been upgraded to the Active Directory directory service and unless all computers on the network are running Windows 2000 or later. WINS servers communicate with network clients by using NetBIOS name resolution. WINS replication is only required between WINS servers.

System service name: WINS Application protocol Protocol Ports
NetBIOS Name Resolution UDP 137
WINS Replication TCP 42
WINS Replication UDP 42

Windows Media Services
Windows Media Services in Windows 2003 replaces the following four services that are included in Windows Media Services versions 4.0 and 4.1:
Windows Media Monitor Service
Windows Media Program Service
Windows Media Station Service
Windows Media Unicast Service

Windows Media Services is now a single service that runs on Windows 2003, Standard Edition; Windows 2003, Enterprise Edition; and Windows 2003, Datacenter Edition. Its core components were developed by using the COM, and it has a flexible architecture that you can customize for specific programs. It supports a greater variety of control protocols, including Real Time Streaming Protocol (RTSP), Microsoft Media (MMS) protocol, and HTTP.

System service name: WMServer Application protocol Protocol Ports
HTTP TCP 80
MMS TCP 1755
MMS UDP 1755
MS Theater UDP 2460
RTCP UDP 5005
RTP UDP 5004
RTSP TCP 554

Windows Time
The Windows Time system service maintains date and time synchronization on all Windows XP and Windows 2003-based computers on a network. This service uses Network Time Protocol (NTP) to synchronize computer clocks so that an accurate clock value, or timestamp is assigned for network validation and for resource access requests. The implementation of NTP and the integration of time providers help make Windows Time a reliable and scalable time service for your enterprise. For computers that are not joined to a domain, you can configure Windows Time to synchronize time with an external time source. If this service is turned off, the time setting for local computers is not synchronized with a time service in the Windows domain or with an externally configured time service. Windows 2003 uses NTP. NTP runs on UDP port 123. The Windows 2000 version of this service uses Simple Network Time Protocol (SNTP). SNTP also runs on UDP port 123.

System service name: W32Time Application protocol Protocol Ports
NTP TCP 123
SNTP UDP 123

World Wide Web Publishing Service
World Wide Web Publishing Service provides the infrastructure that is necessary to register, to manage, to monitor, and to serve Web sites and programs that are registered with IIS. This system service contains a process manager and a configuration manager. The process manager controls the processes where custom applications and Web sites reside. The configuration manager reads the stored system configuration for World Wide Web Publishing Service and makes sure that Http.sys is configured to route HTTP requests to the appropriate application pools or operating system processes. You can configure the ports that are used by this service through the Internet Information Services (IIS) Manager snap-in. If the administrative Web site is enabled, a virtual Web site is created that uses HTTP traffic on TCP port 8098.

System service name: W3SVC Application protocol Protocol Ports
HTTP TCP 80
HTTPS TCP 443

back to the top
Ports and Protocols
The following table summarizes the information from the “System Services Ports” section of this article. This table is sorted by port number instead of by the service name. Port Protocol Application protocol System service name
n/a GRE GRE (IP protocol 47) Routing and Remote Access
n/a ESP IPSec ESP (IP protocol 50) Routing and Remote Access
n/a AH IPSec AH (IP protocol 51) Routing and Remote Access
7 TCP Echo Simple TCP/IP Services
7 UDP Echo Simple TCP/IP Services
9 TCP Discard Simple TCP/IP Services
9 UDP Discard Simple TCP/IP Services
13 TCP Daytime Simple TCP/IP Services
13 UDP Daytime Simple TCP/IP Services
17 TCP Quotd Simple TCP/IP Services
17 UDP Quotd Simple TCP/IP Services
19 TCP Chargen Simple TCP/IP Services
19 UDP Chargen Simple TCP/IP Services
20 TCP FTP default data FTP Publishing Service
21 TCP FTP control FTP Publishing Service
21 TCP FTP control Application Layer Gateway Service
23 TCP Telnet Telnet
25 TCP SMTP Simple Mail Transfer Protocol
25 UDP SMTP Simple Mail Transfer Protocol
25 TCP SMTP Exchange
25 UDP SMTP Exchange
42 TCP WINS Replication Windows Internet Name Service
42 UDP WINS Replication Windows Internet Name Service
53 TCP DNS DNS
53 UDP DNS DNS
53 TCP DNS Internet Connection Firewall/Internet Connection Sharing
53 UDP DNS Internet Connection Firewall/Internet Connection Sharing
67 UDP DHCP DHCP
67 UDP DHCP Internet Connection Firewall/Internet Connection Sharing
69 UDP TFTP Trivial FTP Daemon Service
80 TCP HTTP Windows Media Services
80 TCP HTTP World Wide Web Publishing Service
80 TCP HTTP SharePoint Portal
88 TCP Kerberos Kerberos Key Distribution Center
88 UDP Kerberos Kerberos Key Distribution Center
102 TCP X.400 Microsoft Exchange MTA Stacks
110 TCP POP3 Microsoft POP3 Service
110 TCP POP3 Exchange
119 TCP NNTP Network News Transfer Protocol
123 UDP NTP Windows Time
123 UDP SNTP Windows Time
135 TCP RPC Message Queuing
135 TCP RPC Remote Procedure Call
135 TCP RPC Exchange
135 TCP RPC Certificate Services
135 TCP RPC Service
135 TCP RPC Distributed File System
135 TCP RPC Distributed Link Tracking
135 TCP RPC Distributed Transaction Coordinator
135 TCP RPC Event Log
135 TCP RPC Fax Service
135 TCP RPC File Replication
135 TCP RPC Local Security Authority
135 TCP RPC Remote Storage Notification
135 TCP RPC Remote Storage
135 TCP RPC Systems Management 2.0
135 TCP RPC Terminal Services Licensing
135 TCP RPC Terminal Services Session Directory
137 UDP NetBIOS Name Resolution Computer Browser
137 UDP NetBIOS Name Resolution
137 UDP NetBIOS Name Resolution Windows Internet Name Service
137 UDP NetBIOS Name Resolution Net Logon
137 UDP NetBIOS Name Resolution Systems Management 2.0
138 UDP NetBIOS Datagram Service Computer Browser
138 UDP NetBIOS Datagram Service Messenger
138 UDP NetBIOS Datagram Service
138 UDP NetBIOS Datagram Service Net Logon
138 UDP NetBIOS Datagram Service Distributed File System
138 UDP NetBIOS Datagram Service Systems Management 2.0
138 UDP NetBIOS Datagram Service License Logging Service
139 TCP NetBIOS Session Service Computer Browser
139 TCP NetBIOS Session Service Fax Service
139 TCP NetBIOS Session Service Performance Logs and Alerts
139 TCP NetBIOS Session Service Print Spooler
139 TCP NetBIOS Session Service
139 TCP NetBIOS Session Service Net Logon
139 TCP NetBIOS Session Service Remote Procedure Call Locator
139 TCP NetBIOS Session Service Distributed File System
139 TCP NetBIOS Session Service Systems Management 2.0
139 TCP NetBIOS Session Service License Logging Service
143 TCP IMAP Exchange
161 UDP SNMP SNMP Service
162 UDP SNMP Traps Outbound SNMP Trap Service
389 TCP LDAP Local Security Authority
389 UDP LDAP Local Security Authority
389 TCP LDAP Distributed File System
389 UDP LDAP Distributed File System
443 TCP HTTPS HTTP SSL
443 TCP HTTPS World Wide Web Publishing Service
443 TCP HTTPS SharePoint Portal
445 TCP SMB Fax Service
445 TCP SMB Print Spooler
445 TCP SMB
445 TCP SMB Remote Procedure Call Locator
445 TCP SMB Distributed File System
445 TCP SMB License Logging Service
445 TCP SMB Net Logon
500 UDP IPSec ISAKMP Local Security Authority
515 TCP LPD TCP/IP Print
548 TCP File for Macintosh File for Macintosh
554 TCP RTSP Windows Media Services
563 TCP NNTP over SSL Network News Transfer Protocol
593 TCP RPC over HTTP Remote Procedure Call
593 TCP RPC over HTTP Exchange
636 TCP LDAP SSL Local Security Authority
636 UDP LDAP SSL Local Security Authority
993 TCP IMAP over SSL Exchange
995 TCP POP3 over SSL Exchange
1270 TCP MOM-Encrypted Microsoft Operations Manager 2000
1433 TCP SQL over TCP Microsoft SQL
1433 TCP SQL over TCP MSSQL$UDDI
1434 UDP SQL Probe Microsoft SQL
1434 UDP SQL Probe MSSQL$UDDI
1645 UDP Legacy RADIUS Internet Authentication Service
1646 UDP Legacy RADIUS Internet Authentication Service
1701 UDP L2TP Routing and Remote Access
1723 TCP PPTP Routing and Remote Access
1755 TCP MMS Windows Media Services
1755 UDP MMS Windows Media Services
1801 TCP MSMQ Message Queuing
1801 UDP MSMQ Message Queuing
1812 UDP RADIUS Authentication Internet Authentication Service
1813 UDP RADIUS Accounting Internet Authentication Service
1900 UDP SSDP SSDP Discovery Service
2101 TCP MSMQ-DCs Message Queuing
2103 TCP MSMQ-RPC Message Queuing
2105 TCP MSMQ-RPC Message Queuing
2107 TCP MSMQ-Mgmt Message Queuing
2393 TCP OLAP Services 7.0 SQL : Downlevel OLAP Client Support
2394 TCP OLAP Services 7.0 SQL : Downlevel OLAP Client Support
2460 UDP MS Theater Windows Media Services
2535 UDP MADCAP DHCP
2701 TCP SMS Remote Control (control) SMS Remote Control Agent
2701 UDP SMS Remote Control (control) SMS Remote Control Agent
2702 TCP SMS Remote Control (data) SMS Remote Control Agent
2702 UDP SMS Remote Control (data) SMS Remote Control Agent
2703 TCP SMS Remote Chat SMS Remote Control Agent
2703 UPD SMS Remote Chat SMS Remote Control Agent
2704 TCP SMS Remote File Transfer SMS Remote Control Agent
2704 UDP SMS Remote File Transfer SMS Remote Control Agent
2725 TCP SQL Analysis Services SQL Analysis
2869 TCP UPNP Universal Plug and Play Device Host
2869 TCP SSDP event notification SSDP Discovery Service
3268 TCP Global Catalog Local Security Authority
3269 TCP Global Catalog Local Security Authority
3343 UDP Services Service
3389 TCP Terminal Services NetMeeting Remote Desktop Sharing
3389 TCP Terminal Services Terminal Services
3527 UDP MSMQ-Ping Message Queuing
4011 UDP BINL Remote Installation
4500 UDP NAT-T Local Security Authority
5000 TCP SSDP legacy event notification SSDP Discovery Service
5004 UDP RTP Windows Media Services
5005 UDP RTCP Windows Media Services
42424 TCP ASP.Net Session State ASP.NET State Service
51515 TCP MOM-Clear Microsoft Operations Manager 2000
Microsoft provides the information in this table in a Microsoft Excel worksheet. This worksheet is available for download from the Microsoft Download Center:
Download the Port_Requirements_for_Microsoft_Windows_Server_System.xls package now.

back to the top
REFERENCES
The Help files for each of the Microsoft products that are described in this article contain additional information that you may find useful to help configure your programs. Windows 2003 Help contains step-by-step instructions about how to configure specific technologies and roles.
General Information
For more information about system services in Windows 2003 and Windows XP, visit the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/plan/svrxpser.asp

For more information about how to help secure Windows 2003 and for sample IPSec filters for specific roles, see the “Windows 2003 Security Guide.” To see this guide, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/prodtech/win2003/w2003hg/sgch00.asp

For more information about operating system services, security settings, and IPSec filtering, see the “Threats and Countermeasures Guide.” To see this guide, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/topics/hardsys/TCG/TCGCH00.asp

For additional information about port assignments for well-known ports, click the following article number to view the article in the Microsoft Knowledge Base:
174904 Information about TCP/IP Port Assignments

Additionally, see “Appendix B – Port Reference for MS TCP/IP” in the Microsoft Windows NT 4.0 Resource Kit. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winntas/reskit/net/port_nts.asp

Additionally, see “TCP and UDP Port Assignments” in the Windows 2000 Resource Kit. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/cnet/cnfc_por_GDQC.asp

The Internet Assigned Numbers Authority coordinates the use of well-known ports. To view this organization’s list of TCP/IP port assignments, visit the following Web site:

http://www.iana.org/assignments/port-numbers

Remote Procedure Calls and DCOM
For information about RPC and how to configure DCOM to work with firewalls, see the “Using Distributed COM with Firewalls” white paper. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/com/wpaper/dcomfw.asp

For a detailed discussion of DCOM, see the “Using Distributed COM with Firewalls” white paper. To do so, visit the following Microsoft Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dndcom/html/msdn_dcomfirewall.asp

For a detailed description of RPC, visit the following Microsoft Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnanchor/html/rpcank.asp

For additional information about configuring RPC to work with a firewall, click the following article number to view the article in the Microsoft Knowledge Base:
154596 HOWTO: Configure RPC Dynamic Port Allocation to Work with Firewall

For more information about the RPC protocol and how computers that are running Windows 2000 initialize, see the “Windows 2000 Startup and Logon Traffic Analysis” white paper. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/prodtechnol/windows2000serv/deploy/w2kstart.asp

Distributed Transaction Coordinator
For additional information about how to configure DTC to use a specific range of ports, click the following article number to view the article in the Microsoft Knowledge Base:
250367 INFO: Configuring Microsoft Distributed Transaction Coordinator (DTC) to Work Through a Firewall

Domain Controllers and Active Directory
For additional information about how to restrict Active Directory replication traffic, click the following article number to view the article in the Microsoft Knowledge Base:
224196 Restricting Active Directory Replication Traffic to a Specific Port

For an explanation of how the Directory System Agent, LDAP, and the local system authority are related, visit the following Microsoft Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/directory_system_agent.asp

For additional information about how LDAP and the global catalog work in Windows 2000, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windows2000serv/reskit/distsys/part1/dsgch10.asp

Commerce
For information about how to help configure secure applications that are built on top of Microsoft Commerce , visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/comm/comm2002/deploy/SecCncpt.asp

Exchange
For additional information about how to restrict Exchange 2000 and Exchange 2003 MAPI traffic, click the following article number to view the article in the Microsoft Knowledge Base:
270836 Exchange 2000 and Exchange 2003 Static Port Mappings

For additional information about the network ports and protocols that are supported by Exchange 2000 , click the following article number to view the article in the Microsoft Knowledge Base:
278339 XGEN: TCP/UDP Ports Used By Exchange 2000

For additional information about how to configure Exchange 5.5 to use an alternative port for LDAP communications, click the following article number to view the article in the Microsoft Knowledge Base:
224447 XADM: How to Change LDAP Port Assignments in Exchange

For additional information about the ports that are used by Exchange 5.5 and earlier versions of Exchange , click the following article number to view the article in the Microsoft Knowledge Base:
176466 XGEN: TCP Ports and Microsoft Exchange: In-depth Discussion

File Replication Service
For additional information about how to configure FRS to work with a firewall, click the following article number to view the article in the Microsoft Knowledge Base:
319553 How to Restrict FRS Replication Traffic to a Specific Static Port

Internet Information Services
For additional information about the ports that are used by IIS 4.0, by IIS 5.0, and by IIS 5.1, click the following article number to view the article in the Microsoft Knowledge Base:
327859 INFO: Inetinfo Services Use Additional Ports Beyond Well-Known Ports

For information about how FTP works, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/standard/wsa_ftp_modes.asp

IPSec and VPNs
For additional information about how to configure IPSec default exemptions in Windows, click the following article number to view the article in the Microsoft Knowledge Base:
811832 IPSec Default Exemptions Can Be Used to Bypass IPSec Protection in Some Scenarios

For additional information about the ports and protocols that are used by IPSec, click the following article number to view the article in the Microsoft Knowledge Base:
233256 How to Enable IPSec Traffic Through a Firewall

For additional information about new and updated features in L2TP and IPSec, click the following article number to view the article in the Microsoft Knowledge Base:
818043 L2TP/IPSec NAT-T Update for Windows XP and Windows 2000

Multicast Address Dynamic Client Allocation Protocol (MADCAP)
For more information about how to plan MADCAP servers, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/deployguide/dnsbb_tcp_btgh.asp

Message Queuing
For additional information about the ports that are used by Microsoft Message Queuing, click the following article number to view the article in the Microsoft Knowledge Base:
178517 INFO: TCP, UDP, and RPC Ports Used by MSMQ

Mobile Information
For additional information about the ports that are used by Microsoft Mobile Information 2001, click the following article number to view the article in the Microsoft Knowledge Base:
294297 XCCC: TCP/IP Ports Used by Microsoft Mobile Information

Microsoft Operations Manager
For information about how to plan for and to deploy MOM, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/mom/plan/momcngde.asp

Systems Management
For additional information about the ports that are used by SMS 2003, click the following article number to view the article in the Microsoft Knowledge Base:
826852 Ports That Systems Management 2003 Uses to Communicate Through a Firewall or Through a Proxy

For additional information about the ports that are used by SMS 2.0, click the following article number to view the article in the Microsoft Knowledge Base:
167128 SMS: Network Ports Used by Remote Helpdesk Functions

For additional information about how to configure SMS through a firewall, click the following article number to view the article in the Microsoft Knowledge Base:
200898 SMS: How to Use Systems Management Through a Firewall

For additional information about the ports that are used by SMS 2.0 Remote Tools, click the following article number to view the article in the Microsoft Knowledge Base:
256884 SMS: TCP and UDP Ports Used by Remote Control Have Changed in Service Pack 2

SQL
For additional information about how SQL 2000 dynamically determines ports for secondary instances, click the following article number to view the article in the Microsoft Knowledge Base:
286303 INF: Behavior of SQL 2000 Network Library During Dynamic Port Detection

For additional information about the ports that are used by SQL 7.0 and SQL 2000 for OLAP, click the following article number to view the article in the Microsoft Knowledge Base:
301901 INF: TCP Ports Used by OLAP Services when Connecting Through a Firewall

Terminal Services
For additional information about how to configure the port that is used by Terminal Services, click the following article number to view the article in the Microsoft Knowledge Base:
187623 How to Change Terminal ’s Listening Port

Controlling Communications over the Internet in Windows
For additional information about how Windows XP Service Pack 1 (SP1) communicates over the Internet, see the “Using Windows XP Professional with Service Pack 1 in a Managed Environment” white paper. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/maintain/xpmanaged/00_abstr.asp

For additional information about how Windows 2000 Service Pack 4 (SP4) communicates over the Internet, see the “Using Windows 2000 with Service Pack 4 in a Managed Environment” white paper. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windows2000pro/maintain/w2kmngd/00_abstr.asp

For additional information about how Windows 2003 communicates over the Internet, see the “Using Windows 2003 in a Managed Environment” white paper. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/maintain/security/ws03mngd/00_abstr.asp

back to the top
The information in this article applies to:
Microsoft Windows 2003, Datacenter Edition
Microsoft Windows 2003, Enterprise Edition
Microsoft Windows 2003, Standard Edition
Microsoft Windows 2003, Web Edition
Microsoft Windows 2000
Microsoft Windows 2000 Advanced
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Datacenter
Microsoft SQL 2000 Standard Edition
Microsoft SQL 2000 Enterprise Edition
Microsoft Exchange 2000 Enterprise
Microsoft Exchange 2000
Microsoft Internet Security and Acceleration 2000
Microsoft Windows XP 64-Bit Edition
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional
Microsoft SharePoint Portal 2001
Microsoft Systems Management
Microsoft Systems Management 2.0
Microsoft Systems Management 2003
Microsoft Operations Manager 2000
Microsoft Windows XP Tablet PC Edition
Microsoft Application Center 2000
Last Reviewed: 7/18/2004 (6.1)
Keywords: kbFirewall kbHOWTOmaster KB832017 kbAudITPRO

无关博文

]]> http://jimey.com/2006/12/08/port-requirements-for-the-microsoft-windows-server-system.html/feed 0 自动查找并删除 AutoRun 病毒相关文件 1.1 http://jimey.com/2006/12/06/automatically-find-and-remove-the-autorun-virus-related-documents-1-1.html http://jimey.com/2006/12/06/automatically-find-and-remove-the-autorun-virus-related-documents-1-1.html#comments Wed, 06 Dec 2006 12:27:01 +0000 jimey http://my.donews.com/jimey/2006/12/06/ptwyarCDeiYOaRnRrDwGZAuWVwgxNcLdviBv/ 对付在硬盘根目录下自动运行的病毒程序,程序会自动查找 AutoRun 病毒调用的文件并将其删除.
在重新安装系统后运行一次，就不用担心受以前系统的 AutoRun 病毒影响了!
静默运行参数:/VerySilent
完成后自己删除自己:/Delete

1.1 更新:
增加对 SXS 病毒的查杀

下载地址:http://soft.ylmf.com/downinfo/928.html

无关博文

]]> http://jimey.com/2006/12/06/automatically-find-and-remove-the-autorun-virus-related-documents-1-1.html/feed 0 暴风影音干净安装(搞定捆绑垃圾) http://jimey.com/2006/02/21/storm-video-a-clean-install-gaoding-bundled-garbage.html http://jimey.com/2006/02/21/storm-video-a-clean-install-gaoding-bundled-garbage.html#comments Mon, 29 Nov 1999 16:00:00 +0000 jimey http://jimey.s216.sureserver.com/blog/index.php/2006/02/21/%e6%9a%b4%e9%a3%8e%e5%bd%b1%e9%9f%b3%e5%b9%b2%e5%87%80%e5%ae%89%e8%a3%85%e6%90%9e%e5%ae%9a%e6%8d%86%e7%bb%91%e5%9e%83%e5%9c%be/ 暴风影音是一款非常流行的影音播放软件，但是它从5.0开始就捆绑了很多的垃圾软件，很令人讨厌。尤

其是最新版的暴音下载更是变本加厉，捆绑了更多软件。不过，现在我们已经找到了去除这些垃圾软件的

方法，第一时间告诉广大网友。假设其文件名为StormCodec6.01.28.exe。只要在此文件所在文件夹下建

立一个批处理命令storminstall.cmd，命令如下 ：

    StormCodec6.01.28.exe /S /2052 /noxunlei /noyahoo /nomobile /noebayie /quickasso

    要安装时，只要双击storminstall.cmd则会自动安装常用组件并注册关联，不用我们单击鼠标，而且

垃圾软件一个也不会装上

    暴风影音的安装程序命令行参数：

    /1033　　　- 不询问安装语言，直接安装英文版，在英文版windows上有用

    /2052　　　- 不询问安装语言，直接安装简体中文版

    /skipreal – RealMedia 组件将在安装时被忽略，若在系统中检测到 RealPlayer 的存在此参数也会

自动启用

    /skipapple – QuickTime 组件将在安装时被忽略，若在系统中检检测到 QuickTime 的存在此参数也

会自动启用

    /noxunlei – 安装结束时不询问和下载安装合作软件“迅雷 5”（仅限简体中文版，英文版自动跳过

此步骤）

    /noyahoo – 安装时跳过对合作软件雅虎助手的安装 （仅限简体中文版，英文版自动不安装）

    /nomobile – 安装时不建立图铃、彩信合作网站的桌面和 IE 快捷方式 （仅限简体中文版，英文版

自动不建立）

    /noebayie – 安装时不建立合作网站“易趣”的 IE 工具栏图标（仅限简体中文版，英文版自动不建

立）

    /quickasso – 安装完成后按推荐或当前格式直接关联文件而不跳出选择对话框

    /skipasso　- 安装完成后不关联文件 （适合想采用其他播放器的用户）

    /skipcheck – 安装时跳过对运行环境的检查 （若不加这个参数，安装时会检查 DirectX 和 WMP，

不是最新版本时会给出提示）

    /S – 静默安装 （不显示用户界面，若没有其他参数，则依系统默认语言按照默认设置安装默认组件

）

    平时使用时要注意的是，每个参数之间有一个空格隔开，而且/S – 静默安装参数要放在第一个。

相关博文

]]> http://jimey.com/2006/02/21/storm-video-a-clean-install-gaoding-bundled-garbage.html/feed 0