Configuring a Firewall to Support Directory Services Outside the DMZ

MassTransit allows for authentication of application and web client contacts against Active Directory on Windows 2003 Server and greater. Because MassTransit systems may sit outside of an organization’s firewall in the demilitarized zone (DMZ), it may be necessary to open the ports on a firewall to allow Active Directory queries to pass through.

Ports Used by MassTransit

MassTransit uses TCP and UDP port 389 to communicate with Active Directory. This port number is the default for Active Directory. If your organization uses a different port number, or, if your firewall is configured to do port forwarding/mapping, you can specify this port number in the MassTransitEngine.cfg file, located in the root folder of your MassTransit installation. For instructions on how to configure the Active Directory Authentication refer to the following section: Configuring Active Directory Authentication.