Telefon DE: +49-8282-800-400 Telefon AT: +43-7322-370-202 Telefon CH: +41-41-5210-100 info@crmaddon.de

DMZ ACT Firewall rules

For performance reasons, we recommend disabling the Windows firewall if you want to access Act! from your own network.

Due to the delay in accessing the Act! database from outside, it is not recommended to access the SQL server over WAN.
Therefore we recommend the following solutions.

  • Act! for Web
  • Handheldcontact
  • Act! Sync
  • Terminal Server
  • VmWare View
  • Panologic TSE

If you want to reach the database from outside (most likely via a DMZ), then you need to open some ports.

By default, these are the ports you need to configure if you have a firewall between your database server and your client (or Act! for Web Server).

Protocol

Port Nummer
TCP 1433 (Standard SQL Server Port)
UDP 1434 (Standard SQL Server Port)
TCP 80 (Default Web Port if you are using ACT! Internet Synchronization, or ACT! by Sage Premium for Web)
TCP

o ensure that it is the correct network port.
Use the following steps to verify the current port number that the Publisher database is monitoring for network synchronization.

  1. Start the ACT! Network Sync Service: and check which port is selected here.
  2. The port is displayed in the Monitor Port section.
TCP

To ensure that it is the correct application port.

Use the following steps to verify the current port number that the Publisher database monitors for application synchronization.

  1. Go to the Tools menu, then to Synchronization, and then click Accept Incoming Sync.
  2. If synchronization was already enabled, the Sync Result message box should appear.
    Click OK to stop the synchronization.
  3. Now go back to the Tools menu, click on Synchronization, and then click on Accept Incoming Sync. The ACT! dialog box should appear.
  4. Check the port number and click OK. Now the sync result message box should appear.
  5. Click OK to confirm the message box. 
TCP

 

Instructions to find out the dynamically distributed ACTDIAG SQL port.

  1. Click on the Windows Start button.
  2. Now write actdiag in the window and confirm with Ok.
  3. If a disclaimer box pops up, you can simply confirm it with Ok.
  4. As soon as the ACT! Diagnostics window appears, click on Server -> Server Security.
  5. You will find the TCP/IP port number in the lower area.
SMB

Tutorial: SMB over TCP vs. SMB over NBT
A central task for the SMB (Server Message Block) protocol is file sharing. In Windows NT, it ran over NBT (NetBIOS over TCP/IP), which used the famous UDP 137 and 138 ports and TCP 139. With Windows 2000, Microsoft added the option to run SMB directly over TCP/IP, without the additional NBT layer. TCP port 445 is used for this purpose.

Enabling and disabling NBT to control ports 137, 138, and 139
In Windows versions since Windows 2000 you have the possibility to disable NetBIOS via TCP/IP. First, locate the appropriate network adapter icon, right-click and select Properties. How you find the network adapter icon varies a bit between Windows versions. Then click on Internet Protocol (TCP/IP) and Properties. Again, the exact name varies slightly between versions. Now click on Advanced and select the WINS tab. There you can enable or disable NetBIOS over TCP/IP. The changes take effect immediately without having to restart the system.

Disable NBT (NetBIOS over TCP/IP) to close UDP ports 137 and 138 and TCP port 139. Enable NBT to reopen these ports.

The communication process of ports 139 and 445 is realized using the SMB (Server Message Block) protocol. That is, you use the name list information in the DNS server to find the object you need to communicate with. If you successfully get the IP address of the object, you can access the shared resources. Windows versions prior to Windows 2000 use the NetBIOS protocol to solve the computer name problem. The IP address is determined by sending the NetBIOS name of the communication partner to the WINS server. CIFS, inherited from Windows 2000 and later versions, uses DNS to solve the computer name problem.

On systems after Windows 2000, port 445 is used. The file sharing function itself is the same as port 139, but this port uses a different protocol than SMB. It is the latest CIFS (Common Internet File System) protocol used in Windows 2000. CIFS and SMB have different methods for resolving computer names. SMB uses NetBIOS and WINS to resolve computer names, while CIFS uses DNS. When ports 139 and 445 are open at the same time, port 445 is preferred for file sharing on the network. When port 445 is closed, file sharing on the network uses port 139, but since Windows 10, file sharing uses only port 445. When port 445 is closed, file sharing services cannot be used. Therefore, in the internal corporate network environment where the file and print server uses Windows, ports 139 and 445 cannot be closed.