How to restrict RPC dynamic TCP/IP port allocation

By: Unknown on 14:27

Share it Please

Tweet

MSDTC and DCOM use RPC (Remote Procedure Call) dynamic port allocation to randomly selects port numbers above 1024. This makes it difficult to configure your firewall.

To restrict dynamic port allocation to port 135, the RPC Endpoint Mapper, and to a range of dynamic ports you have to execute the following steps:

1. Select Start, Programs, Administrative Tools, Component Services.
2. Expand the Component Services node.
3. Expand the Computers node.
4. Right-click My Computer and press Properties.
5. Select the Default Protocols tab.
6. Select Connection-oriented TCP/IP and press the Properties button.
7. Press the Add button.
8. Type a port range (I used to use the ports from 5000, for example 5000-5200) into the Port range box, and press OK.
9. Insure that the Port range assignment and Default dynamic port allocation options are set to Internet range.
10. Press OK, OK, and OK.
11. Shutdown and restart your computer.