How to Configure Proxy Packet Filters for Terminal Server Access on the Same Server (258544)

SUMMARY

When you install Microsoft Proxy Server 2.0 on a computer running Windows NT 4.0 Terminal Server Edition or Windows 2000 Server with the Terminal Server component and packet filtering enabled, you need to create a custom filter to allow access to the Terminal Server service. This article outlines the packet filter that you need to enable Proxy Server to allow Terminal Server clients to create a Terminal Server session using the RDP protocol.

MORE INFORMATION

NOTE: The steps to follow only allow access to Terminal Services running on the Proxy Server itself. These steps will not allow access to a Terminal Server behind the Proxy Server.

The Terminal Server client tries to use TCP port 3389 as a destination port when it attempts to connect to the Terminal Server. Configure Proxy Server to allow a client on the Internet to connect to the server on TCP port 3389 from a random source port:

Open Internet Service Manager.
Right-click Web Proxy, and then click Properties.
Click Security.
On the Packet Filters tab, click Add.

Click Custom Filter, and then change the values to match the following table:

   Setting       Value
   -------------------------------
   Protocol ID   TCP
   Direction     Both
   Local Port    Fixed Port: 3389
   Remote Port   Any

Click OK, and then verify that the filter was added to the list of exceptions.
If the filter is successfully added to the list, close the Web proxy interface.

For additional information about ports and Microsoft services, click the article number below to view the article in the Microsoft Knowledge Base:

150543 WinNT, Terminal Server, and Exchange Services Use TCP/IP Ports