Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Win Server 2008 R2 with AD, DNS, DHCP and Fileserver roles installed. I have enabled windows firewall. Server is loceted in internal secure network. What extra security rules should I add to the firewall? Any suggestions?

share|improve this question

I don't add any. The defaults are pretty sane. It's restrictive by default and only opens up ports for the roles you add.

share|improve this answer
+1. Windows Firewall is based on a "whitelist" mentality, which means anything not specifically allowed is denied by default. If you come across a program that won't work, then you just need to open the firewall for that port. – Hyppy May 11 '11 at 22:24
There is only one exception I've found - on a multi-site network, the domain controllers seem to reject requests from other subnets, and only respond to sites in their own subnet. This is easy fixed though. – Mark Henderson May 11 '11 at 22:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.