I am using WSS 3, and will have two WFE's, one behind the firewall, and one in the DMZ for Extranet Services. What port(s) do I need to make sure are available in order for the Windows SharePoint Services Administration service to be able to keep the App Pools/Sites sync'd between the two WFE's? And do they need to be bidirectional, or can I make all changes on the internal WFE and just allow outbound traffic to update the Extranet Server?Thank you

Hi,Joel Oleson, has a good of Chart of Ports for SharePoint 2007 on his Blog. However, the Shared Service Provider web service calls occur on ports 56737 and 56738, will not be necessary. The second Post from the UK SharePoint Team session for TechEd 2008 Barcelona has inter server communication diagrams that describe traffic between servers, third is the WSS 3 Security for Extranets, and last is the Book Planning and Architecture Part 2 for WSS 3.. \\ Referencehttp://blogs.msdn.com/joelo/archive/2007/02/13/protocols-ports-and-firewall-rules.aspxhttp://blogs.msdn.com/uksharepoint/archive/2009/01/05/sharepoint-ports-proxies-and-protocols-an-overview-of-farm-communications.aspxhttp://technet.microsoft.com/en-us/library/cc287966.aspxhttp://go.microsoft.com/fwlink/?LinkID=85553\\ ToolsWireShark. This is a physical packet sniffer that can be used to examine all network packets. You can download WireShark here http://www.wireshark.org/. Fiddler. This is a HTTP debugging application that can be used to examine HTTP traffic. This is simpler than WireShark but will not cover TDS or SMB (which WireShark will). You can download Fiddler http://www.fiddlertool.com/ "As with anything be sure to consider what is necessary, don't just do it to make it work". - Joel Oleson Cheers,-IvanIvan Sanders My LinkedIn Profile, My Blog, @iasanders.