MSMQ 防火墙 端口 配置

TCP ports, UDP ports, and RPC ports that are used by Message Queuin

The following ports are used for Microsoft Message Queuing (MSMQ) operations:TCP: 1801

RPC: 135, 2101*, 2103*, 2105*

UDP: 3527, 1801

The following is for Message Queuing 3.0 and later:

While Message Queuing uses the same ports that are used in earlier versions of MSMQ, Message Queuing also introduces TCP port 389. TCP port 389 must be open for MQIS queries to be made directly against Active Directory. Additionally, HTTP messaging in Message Queuing 3.0 and later requires that the port specified for the Message Queuing virtual directory be open.

This information is useful for interpreting the following:Netstat -a output

A network trace

Configuring a firewall

The table below describes the ports used by Message Queuing:

Port	Purpose	Applicable Version
TCP 135	Dynamic RPC port typically assigned by RPC for handshaking with an independent client or with an RPC server for the Message Queuing server to determine the fixed ports.	MSMQ 5.0 MSMQ 4.0 MSMQ 3.0 MSMQ 2.0 MSMQ 1.0
TCP 389	Reserved port used by independent clients and Message Queuing servers to make MQIS requests directly to Active Directory using LDAP.	MSMQ 5.0 MSMQ 4.0 MSMQ 3.0
TCP 1801	Message Queuing (including HTTP messaging) message traffic and internal session management traffic between Queue Managers.	MSMQ 5.0 MSMQ 4.0 MSMQ 3.0 MSMQ 2.0 MSMQ 1.0
UDP 1801	Reserved port used by the Message Queuing independent client to multicast a server discovery broadcast.	MSMQ 5.0 MSMQ 4.0 MSMQ 3.0 MSMQ 2.0 MSMQ 1.0
TCP 2101*	Message Queuing listens on this port on the Domain Controller for RPC-based MQIS and Active Directory lookups.	MSMQ 5.0 MSMQ 4.0 MSMQ 3.0 MSMQ 2.0 MSMQ 1.0
TCP 2103* TCP 2105*	On these two ports, Message Queuing independent clients and servers listen for RPC-based remote reads of their public queues and private queues. The dependent client also uses these two ports to communicate with its server for send and for receive.	MSMQ 5.0 MSMQ 4.0 MSMQ 3.0 MSMQ 2.0 MSMQ 1.0
UDP 3527	Reserved port used for the internal "ping" mechanism for Message Queuing. Note On Message Queuing 4.0 and later, UDP port 3527 is no longer used by default. For more information on this change, visit the following links:  Security Enhancements that Affect the Default Behavior of Message Queuing MSMQ’s internal ping mechanism over port 3527	MSMQ 3.0 MSMQ 2.0 MSMQ 1.0

* These port numbers may be incremented by 11 if the initial choice of RPC port is being used when Message Queuing initializes. A connecting QM queries port 135 to discover the 2 xxx  ports. 


The table below lists the MSMQ version by operating system: 

Operating System	Message Queuing Version
Windows Server 2008 R2 Windows 7	MSMQ 5.0
Windows Server 2008 Windows Vista	MSMQ 4.0
Windows Server 2003 R2 Windows Server 2003 Windows XP Professional	MSMQ 3.0
Windows Server 2000 Windows Professional 2000	MSMQ 2.0
Windows NT 4.0	MSMQ 1.0

Properties

Article ID: 178517 - Last Review: Sep 28, 2011 - Revision: 1

Applies to

Microsoft Message Queuing 3.0, Microsoft Message Queuing 4.0, Microsoft Message Queuing 5.0

https://support.microsoft.com/en-us/help/178517/tcp-ports--udp-ports--and-rpc-ports-that-are-used-by-message-queuing