pix firewall

[sujeet joshi]

HELLO,

Iam having One Win 2000 server(Dc) is at Mumbai and other win 2000 server (Adc) is at Paguthan .
Mailing between both server is working fine but user replication is not happening between both the server.
When we give nslookup command it is giving error not authorised server.
Kindly see the conf and update me if any changes to be done.

Pls find the attach file which contain configuration of pix firewall.

Thanks and Regds

Sujeet

[Kell van Daal]

There are multiple ways to replicate Active Directory between sites that are seperated by one or more firewalls.
A good page to start reading about it is at the Microsoft site:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/deploy/confeat/adrepfir.mspx

If nslookup gives you an error about not being authorised, then that's not a firewall problem, but a DNS server problem.
Make sure the right servers can do zone transfers. But according to your config, also check the page I gave the link to. There is more then only that which is preventing you to replicate.