Why connections to DC on port 6666 - 6669 from E2K3 servers?
Hello, We have a couple of clustered servers running W2K3 and E2K3. I've noticed a lot of connections to the DCs on ports 6666 - 6669. Our server AV is reporting (not blocking) these as suspicious. Anyone know what they are used for and if it's safe to block them? We don't use a chat server in Exchange, just pure messaging. Thanks, - Alan.
February 13th, 2011 12:13pm

This is within the dynamic port range. It could be RPC or a number of other things. In a command prompt type "netstat -anb" to figure it out. Mike Crowley Check out My Blog!
Free Windows Admin Tool Kit Click here and download it now
February 13th, 2011 12:35pm

It could be any number of things. In a command prompt type "netstat -anb" to figure it out. Mike Crowley Check out My Blog!
February 13th, 2011 12:36pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics