Ports must be open on my router to allow function on SBS 2008 Remote Desktop?

Similar Questions

• What are TCP/UDP ports must be open for version 4.8 of the VPN Client?

  What are TCP/UDP ports must be open for Cisco VPN Client version 4.8 working?

  Thank you

  Normally, you need the following ports and Protocol:

  UDP 500

  UDP 4500

  ESP

  In this case, you are using IPSec over TCP, you must open the port TCP 10000 or any other port that you want to use for (its configurable) IPSec connections.

  -Kanishka

• What TCP/UDP ports must be open on a firewall for adobe reader and Flash Player?

  What TCP/UDP ports must be open on a firewall for adobe reader and flashplaer to work properly? This would include the update, which connects and no matter what subset of functionality.

  The Acrobat family uses TCP, HTTP/HTTPS for all traffic. Ports and the following processes can be active on a client computer in Windows:

  AdobeARM.exe - automatic updates - port 443

  AcroRd32.exe - brand messages - port 443

  AcroRd32.exe - links in documents - whatever that is specified in the URL

  Acrobat.exe - brand messages - port 443

  Acrobat.exe - links in documents - whatever that is specified in the URL

  AdobeCollabSync.exe - review Tracker data - port 443

  The same ports are used by the components of program on OS X.

  There is no listen to incoming ports for all elements of the Acrobat family. Automatic updates are not pushed, and there is no server in the software process.

• If Port 3389 must be open?

  I use HP Desktop with Visat Home premium 32-bit with SP2 for Vista

  Security is Norton

  I've seen attempts at unsolicited incoming connections IP addresses connecting to this port, or at least try to connect (small notice number of bytes sent and received)

  When I run netstat - ano, I see that port 3389 is in status "listens".

  Shields Up indicates the port is "open".

  I have not checked on remote help

  a few questions come to mind

  1 is this port open even if remote assistance is disabled by default on Vista?

  2. How can I close this port?

  Hello

  By default, Remote Desktop uses port 3389 as listening to all the Remote Desktop connections incoming port. You can change the port to prevent any attack.

  Step to change the listening port:
  a. Click Start, and then type regedit in the search box start and press ENTER.
  b. expand the registry files to:
  HKEY_LOCAL_MACHINE > System > CurrentControlSet > control > TerminalServer > WinStations > RDP - Tcp
  c. then, locate the registry key under:
  PortNumber
  d. on the Edit menu, click on edit and then, in her change the DWORD value, click decimal that will show us the exactportnumber.
  e. Enter the new port number, and then click on the OK"" button.
  f. exit the registry editor and restart your computer.

  See this link:
  http://Windows.Microsoft.com/en-us/Windows-Vista/Remote-Desktop-connection-frequently-asked-questions

  WARNING: this method contains steps that tell you how to modify the registry. However, serious problems can occur if you change the
  Register incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it.
  Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following link:
  http://Windows.Microsoft.com/en-us/Windows7/back-up-the-registry

  
  
  Kind regards
  Afzal Taher-Microsoft Support.
  Visit ourMicrosoft answers feedback Forum and let us know what you think.

• Redirect Port WRV210 not open ports

  Greetings,

  I have a Linksys/Cisco WRV210 Wireless-G VPN Router with RangeBooster.  ISP is a dynamic IP with all ports open.  I have no equipment to interact with them. they give me just a CAT5 cable on the wall.  ISP-> WRV210-> LAN

  Router stats

  Hardware Version: WRTR-221G_V1

  Software version: 2.0.0.11

  Connection type: Automatic Configuration - DHCP

  IP address: 10.1.222.104

  Subnet mask: 255.255.255.0

  Default gateway: 10.1.222.1

  Port Forwarding 22152 - 22152 192.168.1.152 enabled

  No trigger port

  DMZ disabled

  If I am controlled within the local network

  nmap -p22152 192.168.1.152Interesting ports on 192.168.1.152:PORT      STATE SERVICE22152/tcp open  unknown
  

  If I am controlled from outside the router (xxx and # are just my changes of masking)

  nmap -p22152 desktop.dns.xxx
  Interesting ports on ##.###.##.###:
  PORT      STATE  SERVICE
  22152/tcp closed unknown
  

  If I am controlled from inside the LAN on the router

  nmap -p22152 192.168.1.1
  Interesting ports on 192.168.1.1:
  PORT      STATE  SERVICE
  22152/tcp closed unknown
  

  It seems that the router is completely ignoring my Port Forwarding instructions.  I have the hard reset of the router.  I've upgraded to the latest firmware.  None of them has made a difference.

  My final test was to see if all ports are open on the router

  nmap 192.168.1.1
  Interesting ports on 192.168.1.1:
  Not shown: 997 closed ports
  PORT      STATE SERVICE
  80/tcp    open  http
  443/tcp   open  https
  60443/tcp open  unknown
  

  My questikon would be if someone has a 'trick' to enable port forwarding on the road?

  Thank you.

  This product is managed by the Cisco Small Business Support Community.

  For future discussions about this product, go here.

• To open this workbook, your computer must have a version of Microsoft Excel is installed and your Web browser must support opening files directly from Excel in the

  Im trying to open an excel file from a shared Web site, I used to be able to open them in Excel, when I used Internet Explorer, now all I see is the spreadsheet on a Web page, when I try to open the file in Excel (there is a tab that asked do you want to open in excel) I get a message "to open this workbook, your computer must have a version of Microsoft Excel is installed and your Web browser. must support opening files directly from Excel in the browser. »

  You have Excel installed?
  
  If so, can you use Internet Explorer for the Web site?

  As far as I KNOW, Microsoft is not an add-on for Firefox can be opened from Excel in Firefox. It may or may not work properly depending on whether this Web site uses a MIME type for files it delivers.

  Another way to handle that would be via Open Office or free agency; both are open source (free) that allows to display files XLS (Excel) , and both programs have a Mozilla browser plugin to allow Firefox to open the 'Calc' of these programs.

  http://en.Wikipedia.org/wiki/LibreOffice
  
  http://en.Wikipedia.org/wiki/OpenOffice.org > http://en.wikipedia.org/wiki/Apache_OpenOffice

• When you try to install my new Embird program I get the message "this link must be opened with an application, select application. What does that mean?

  Help, I hope that I've not messed up, too bad!

  Help, I have a small embroidery business and have used a program called Embird.  Yesterday, I downloaded an upgrade for this program. It said to uninstall the old program before installing the new, so I did.  Now when I try to install the new one it says this link must be opened with an application, select application.  I have no idea what it means that someone can help me?  I tried to restore the computer to a date prior to just start all over hoping he would restore the old Embird, it says that the file may be damaged and will not work.

  If you were able to 'merge', you have unzipped the file somehow.  What was all the messages when you did the merger?

  Follow these steps:

  1 information about the particular file in question

  Right-click on the downloaded file, and select Properties.  What does say for 'File Type' and what is the 3-letter file extension (after the point)?

  If there is no file extension, find the file using Windows Explorer, and then click Tools > Folder Options > view.  Uncheck "Hide extensions for known file types" and click OK.  Now, look at the file again for the file extension.

  2. test of exe files

  Click Start > run, then type notepad in the "open" box, then click OK
  Didn't open a Notepad window?  If not, what error message do you have?

  Click Start > run, and then type the following in the "Open" box and click OK
  %SystemRoot%\system32\
  Find notepad.exe (or just Notepad if file extensions are not displayed), and then double-click it.  What is going on?

• Impossible to get any application that must be opened with .exe files

  original title: file extension exe

  Cannot get any application that must be opened with .exe files.  This includes all the games. Outlook Express, Microsoft Word and Excel.  Whenever I try to open one of these applications, the computer comes back with a list of available applications and said to ' choose the program the that you want to use to open this file.  None of the work programmes.

  http://www.dougknox.com/xp/tips/xp_easy_file.htm - Restore default associations of files easily
  http://www.dougknox.com/xp/file_assoc.htm - Doug Knox .lnk and .exe association fixes MS - MVP - Elephant Boy computers - Don ' t Panic!

• I try to connect to the creative cloud on my MacBook Desktop App and sees only a spinning wheel where the application must be open. On a related note, I'm signing CC because I thought that my Lightroom Develop module is disabled. Clues?

  I try to connect to the creative cloud on my MacBook Desktop App and sees only a spinning wheel where the application must be open. On a related note, I'm signing CC because I thought that my Lightroom Develop module is disabled. Clues?

  Mac https://forums.adobe.com/message/5470608 spinning wheel

• ORA-00704: bootstrap process failure ORA-39700: database must be open minded

  Hello
  Two instances run on Oracle 11 g 2 AIX 64-bit server DB
  
  (1) DB instance: Test1
  (2) DB instance: Test2
  
  Recently, I upgraded "Test1 DB instance of GR 11 1 11 GR 2 material and it works perfectly well."
  
  For instance DB "Test2" who on 11 GR 1 material, when I stop and restart "Test2" instance DB it give following error message.
  
  SQL > startup
  ORACLE instance started.
  
  Total System Global Area 9854357504 bytes
  Bytes of size 2229904 fixed
  7549749616 variable size bytes
  2281701376 of database buffers bytes
  Redo buffers 20676608 bytes
  Mounted database.
  ORA-01092: ORACLE instance is complete. Disconnection forced
  ORA-00704: bootstrap failure process
  ORA-39700: database must be opened with the UPGRADE option
  Process ID: 1237084
  Session ID: 197 serial number: 3
  
  Please suggest how to start the instance of Test2.
  
  Thank you.

  Please suggest how to start the instance of Test2.

  It must be run from the old House of Oracle.

• What high port of windows remote desktop XP use?

  I have a system with 63 customers on them and I need to use remote desktop and computer management tools, but our service HERE must know which ports need to be open can someone help me with this?

  It seems that it is port 3389.

  Go to this site and click on the last question:

  <>http://Windows.Microsoft.com/en-us/Windows-Vista/Remote-Desktop-connection-frequently-asked-questions >

  HTH,
  JW

• Problem with Remote Desktop using router WRT54GC

  Hi all.

  My husband and I travel with a computer and an iPhone each, so 4 wireless devices, when we travel, we use the WRT54GC to connect to DSL or broadband from the hotel and then create a LAN in the room using the WRT54GC so we can connect all our devices through the router to the internet.

  Key steps are:

  (1) connect to the router from the hotel to rent a computers IP address.

  (2) do an ipconfig to get the IP address leased the hotel, over the subnet, DNS servers, etc.

  (3) hook a computer into the WRT54GC and give him the IP address and other parameters and clone the IP address of the original computer used to connect to the hotel so that the hotel think that our WRT54GC is the same device.

  (4) connect the router to the wall to talk to the router of the hotel and to connect our devices on wifi LAN created by the WRT54GC and we're good to go.

  Everything works very well and always, but with one exception: we normally use connection software Office Microsoft standard to logon remotely to our computers at home.  We use dyndns to update the IP address of the computer and were marketed in the House so that each computer is accessed through our home router when a query of the DRC between the use of this port forwarding port.

  However, all of a sudden we cannot Remote Desktop our personal computers through the WRT54GC.

  If we put the original computer used to access the router from the hotel directly to the connection to the local network, then there is no problem and that computer can successfully remote desktop, but once we put the router in the equation, we cannot do.

  Any thoughts?  It's certainly something about the configuration of the router, but I checked the firewall and DNS, and those who are not suspects.  The router configuration has not changed in recent years and has always worked previously.

  Any help appreciated.

  Thanks for the tip!

  We have recently started using logmein.com.  There is no charge for simple remote desktop, but the monitor resize and things is easier with it as the version of Microsoft, and for a small fee, you can activate on the management of files, allowing you to do things like file transfer between your home and remote computers easily.  I had tried to do in the past using DRC and it was too slow, but not also with logmein.com.

  That's why we have not been totally freak out the problem, because we had a backup solution with this product, but my husband has a phone in his office, he can connect to while overseas to make calls since in Australia (where we live) while he gets a charge local calls only, and it does not work with logmein , that is why we must get Microsoft DRC will once again!

  In any case, we use dyndns to administer a dynamic update of our IP address for our home router, is to make our computers at home and in a last ditch effort, I had a look at our account and re-joined our IP against our dynamic naming.  Hop, DRC said work again after that.

  It is most strange, because the IP listed was the good IP, but somehow it seemed temporarily do not resolve correctly.

  In any case, it's all fixed.

  At least, it was pretty obvious that it was something somewhere between the router and the House, because of the way he acted. It's usually pretty obvious when your home network has fallen... we knew that is that since we could communicate by other means.

  Thanks for the tip on the other remote tools.  I will certainly check.  There is never too much!

• Exchange 2007 SBS 2008 farm 25 port transport service

  Hello guys,.

  I have the following problem;

  -sbs 2008

  -exchange 2007

  have random closing port 25.

  Restart the result in a code exchange transport service could not stop the service.

  Restart the entire server has solved the problem for abouth 1 day.

  Things I've done,

  -Windows Update Server

  -Exchange of the sp1 update to sp2 to sp3 ROLLUP 17

  -change the opening of transport service for instead of the network administrator account.

  -drive c has 18 GB of free space.

  -imposed d player has 200 GB of free space in the database.

  -restart the transport service result in not able to shut down the service.

  -telnet external to the server on port 25, especially when there is the problem have a black screen. Since today have not yet opening the port.

  I don't know how to solve this problem at this time.

  Restarting daily, this isn't a solution.

  This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
  *
  http://social.technet.Microsoft.com/forums/en-us/home s/fr-U.S./Accueil
  http://social.msdn.Microsoft.com/Forum

• Through router remote desktop connection gets login screen, but the administrator is the only option (windows 7 pro)

  I have a new windows 7 pro system which has been configured to host a remote desktop connection.  There are 1 user account (active admin), the port number was changed from 3389 and I think that the firewall is disabled (it's Norton Internet Security and I tried to completely disable the firewall).

  When I established a remote connection from another computer on the same subnet, the client asks for login/password and the connection ends and goes directly to the screen of the user.

  This subnet has an internet connection via a firewall or router.  It has been configured to redirect incoming connections for the custom to the host port number.

  When I establish a remote connection from outside through the firewall I am invited to login/password, but the Welcome screen appears and the only options are administrator and other users.  Administrator is blocked for the account restrictions and using other users to type the login and the password does not work - it still fails on bad login/password.

  I've seen this problem described in other forums, but have not seen a solution - anyone got one?

  Thank you

  Hello
  I guess that its due to the settings.
  Check out this link. you might get a few steps.
  http://Windows.Microsoft.com/en-us/Windows-Vista/Remote-Desktop-connection-frequently-asked-questions

  Kind regards.

• VPN tunnel via Cisco to SBS 2008 RRAS router

  I need to provide access to remote users outside of ro on the VPN connection. I have a SBS 2008 Server with 1 NIC (10.1.1.1) and active VPN via the option "set up Virtual Private Network" on the SBS console, I enabled the GRE and port 1723 on my Cisco firewall so (10.1.1.254).

  I can VPN to SBS internally very well and can telnet to port 1723, but cannot spend outdoors.
  I get error 800 how connection on windown 7 PC.

  I can't telnet to port 1723 on the outside (on the internet), please see my Cisco confug and advice if I missed anythings:

  wrsydgw #sh run
  Building configuration...

  Current configuration: 8337 bytes
  !
  version 12.4
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  encryption password service
  !
  hostname wrsydgw
  !
  boot-start-marker
  start the flash c870-advsecurityk9 - mz.124 - 15.T4.bin system
  boot-end-marker
  !
  forest-meter operation of syslog messages
  enable secret 5 $1$ rroD$ / R.6Ce8EdSw7S7B3AJjX81
  !
  AAA new-model
  !
  !
  !
  !
  AAA - the id of the joint session
  clock timezone 10 30 sydney
  !
  Crypto pki trustpoint TP-self-signed-432125903
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 432125903
  revocation checking no
  rsakeypair TP-self-signed-432125903
  !
  !
  TP-self-signed-432125903 crypto pki certificate chain
  certificate self-signed 01
  30820255 308201BE A0030201 02020101 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031325 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 30312E30
  69666963 34333231 32353930 33301E17 303230 33303130 30313331 0D 6174652D
  315A170D 2E302C06 1325494F 03550403 32303031 30313030 30303030 5A 303031
  532D 5365 6C662D53 69676E65 4365 72746966 69636174 652 3433 32313235 642D
  06092A 86 4886F70D 01010105 39303330 819F300D 00308189 02818100 0003818D
  D54A7EE8 D5B13EED 87D8B177 BC34EDD3 3F2BE37D CEF6E57A 1EDBCF29 344B54C4
  EC4DDA6C 8CD07E5C C7E1E6AF 667A5A14 1 HAS 390265 634152D 344D430F 0 ACB0A9F0
  A78CA88C C14B4839 6B367DD1 8D8D726A 36624CC2 3CEC616D D72EC30E D27DE845
  6F443BE2 51EB9660 981EF07B 097C335D 12D06DD3 2FA8EB3C C20F148B EF367A1F
  02030100 01A37F30 7D300F06 03551 D 13 0101FF04 05300301 01FF302A 0603551D
  21821F77 11042330 7274732E 726F6265 6D2E696E 63383737 7465726E 6F64652E
  6F6E2E6E 6574301F 0603551D 23041830 16801450 41DDCEFD CF041B7B B 48371, 91
  5E7EC2D5 D7F6C330 1 D 060355 1D0E0416 DDCEFDCF 04145041 041B7B48 371B915E
  7EC2D5D7 F6C3300D 06092 HAS 86 01010405 00038181 004B1DB1 6EA45622 4886F70D
  2697E497 BE5D2F71 C15F70B5 9DE07318 A1AD6451 E2502A89 22EC2B7D 26D1C4B7
  BC7D09EA F376A2E1 0DF851F2 52C5CFE2 3660BF22 D58E2B15 8A3610BF EDA2FCDC
  B5F7429B A89D84D2 EC126229 489CA0D4 E178FC1E E1FBA853 C78AD740 C5A98B4D
  4CB58F93 1019D06B 78 C 45799 A5BB1A6F 17FE4C6D 7CE5135B DF
  quit smoking
  dot11 syslog
  no ip source route
  !
  !
  !
  !
  IP cef
  no ip domain search
  IP domain name internode.on.net
  name of the IP-server 192.231.203.132
  name of the IP-server 192.231.203.3
  No ipv6 cef
  !
  Authenticated MultiLink bundle-name Panel
  !
  !
  !
  !
  No vlan spanning tree 1
  No vlan spanning tree 100
  username xxxprivilege 15 password 7 xxxxxx
  username privilege 15 secret 5 xxxx xxxxxx.
  username, password 7 xxxxprivilege 15 xxxxxx!
  !
  crypto ISAKMP policy 1
  BA 3des
  md5 hash
  preshared authentication
  ISAKMP crypto key QnrpzdFI address 139.130.36.42
  ISAKMP crypto 5 30 keepalive
  !
  !
  Crypto ipsec transform-set esp-3des esp-md5-hmac vpn - ts
  !
  RTP 1 ipsec-isakmp crypto map
  defined by peer 139.130.36.42
  the value of the transform-set vpn - ts
  match address Maria
  !
  Archives
  The config log
  hidekeys
  !
  !
  property intellectual ssh version 2
  !
  !
  !
  ATM0 interface
  Description - The internode ADSL-
  no ip address
  no ip-cache cef route
  no ip route cache
  no ip mroute-cache
  No atm ilmi-keepalive
  !
  point-to-point interface ATM0.1
  no ip route cache
  PVC 8/35
  PPPoE-client dial-pool-number 1
  !
  !
  interface FastEthernet0
  spanning tree portfast
  !
  interface FastEthernet1
  switchport access vlan 100
  !
  interface FastEthernet2
  spanning tree portfast
  !
  interface FastEthernet3
  spanning tree portfast
  !
  interface Vlan1
  10.1.1.254 IP address 255.255.255.0
  IP access-group INOUT in
  penetration of the IP stream
  stream IP output
  IP nat inside
  IP virtual-reassembly
  IP tcp adjust-mss 1450
  !
  interface Vlan100
  IP 10.1.2.254 255.255.255.0
  IP nat inside
  IP virtual-reassembly
  IP tcp adjust-mss 1450
  !
  interface Dialer0
  Description OF the internode
  the negotiated IP address
  IP access-group DRY in
  IP mtu 1452
  NAT outside IP
  IP virtual-reassembly
  encapsulation ppp
  Dialer pool 1
  Dialer-Group 1
  Authentication callin PPP chap Protocol
  PPP chap hostname [email protected] / * /

  PPP chap password 7 xxxxxxx

  crypto rtp map
  !
  IP forward-Protocol ND
  IP route 0.0.0.0 0.0.0.0 Dialer0
  IP route 10.2.0.0 255.255.0.0 10.1.1.247
  no ip address of the http server
  no ip http secure server
  !
  IP high speed-flyers
  Top 50
  Sorting bytes
  cache-timeout 5000
  !
  IP nat inside source map route VPN-sheep interface Dialer0 overload
  IP nat inside source static tcp 10.1.1.1 25 59.167.239.185 25-card route-bypass extensible portfwd
  IP nat inside source static tcp 10.1.1.1 443 59.167.239.185 443-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.1.1 1723 59.167.239.185 1723-route bypass-portfwd expandable map
  IP nat inside source static tcp 10.1.1.1 3389 59.167.239.185 route-bypass extensible portfwd 3390-card
  IP nat inside source static tcp 10.1.1.7 3389 59.167.239.185 3391-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.1.125 4333 59.167.239.185 route-bypass extensible portfwd 4333-card
  IP nat inside source static tcp 10.1.1.133 4334 59.167.239.185 route-bypass extensible portfwd 4334-card
  IP nat inside source static tcp 10.1.1.112 59.167.239.185 4335 4335-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.2.200 8000 59.167.239.185 8000-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.2.201 443 59.167.239.185 8001-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.2.10 80 59.167.239.185 8002-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.2.11 80 59.167.239.185 8003-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.1.10 80 59.167.239.185 route-bypass extensible portfwd 8004-card
  IP nat inside source static tcp 10.1.1.11 80 59.167.239.185 8005-route-bypass portfwd expandable card
  IP nat inside source static tcp 10.1.2.200 80 59.167.239.185 - extensible 8008 portfwd bypass road map
  !
  DRY extended IP access list
  allow tcp any a Workbench
  permit tcp any any eq 22
  allow any host 59.167.239.185 eq tcp smtp
  allow any host 59.167.239.185 eq 443 tcp
  allow any host 59.167.239.185 eq 8000 tcp
  allow any host 59.167.239.185 eq 8008 tcp
  permit tcp any host 59.167.239.185 eq 8001
  permit tcp any host 59.167.239.185 eq 8002
  permit tcp any host 59.167.239.185 eq 8003
  allow any host 59.167.239.185 eq 4333 tcp
  allow any host 59.167.239.185 eq 4334 tcp
  allow any host 59.167.239.185 eq 4335 tcp
  allow any host 59.167.239.185 eq 8004 tcp
  allow any host 59.167.239.185 eq 8005 tcp
  permit any any icmp echo response
  allow an esp
  allow a gre
  allow a whole ahp
  allow icmp all once exceed
  ICMP all all ttl-exceeded allow it
  allow all all unreachable icmp
  permit any any icmp echo
  allowed UDP any eq field all
  permit udp host 192.231.203.132 eq ntp all
  permit any any eq non500-isakmp udp
  allow udp any any eq isakmp
  deny ip 127.0.0.0 0.255.255.255 everything
  refuse the ip 255.255.255.255 host everything
  refuse the host ip 0.0.0.0 everything
  IP 10.2.0.0 allow 0.0.255.255 everything
  allow any host 59.167.239.185 eq 3389 tcp
  permit tcp host 67.15.24.9 host 59.167.239.185 eq smtp
  permit tcp host 67.15.42.51 host 59.167.239.185 eq smtp
  permit tcp host 67.15.52.7 host 59.167.239.185 eq smtp
  permit tcp host 69.16.202.203 host 59.167.239.185 eq smtp
  permit tcp host 69.16.202.216 host 59.167.239.185 eq smtp
  permit tcp host 70.84.109.196 host 59.167.239.185 eq smtp
  permit tcp host 207.44.218.60 host 59.167.239.185 eq smtp
  permit tcp any host 59.167.239.185 eq 3390
  permit tcp any host 59.167.239.185 eq 3391
  deny ip any any newspaper
  permit tcp any any eq 1723
  allow any host 59.167.239.185 eq tcp 1723
  INOUT extended IP access list
  refuse tcp 10.1.1.3 host no matter what newspaper eq 3389
  allow an ip
  SHEEP extended IP access list
  deny ip 10.0.0.0 0.255.255.255 10.0.0.0 0.255.255.255
  ip licensing 10.1.1.0 0.0.0.255 any
  IP 10.1.2.0 allow 0.0.0.255 any
  NOPFW extended IP access list
  deny ip 10.0.0.0 0.255.255.255 10.0.0.0 0.255.255.255
  IP enable any 10.1.1.0 0.0.0.255
  IP enable any 10.1.2.0 0.0.0.255
  Maria extended IP access list
  IP 10.1.0.0 allow 0.0.255.255 10.2.0.0 0.0.255.255
  !
  !
  !
  !
  !
  route map VPN-sheep permit 1
  corresponds to the IP SHEEP
  !
  bypass-portfwd allowed 10 route map
  corresponds to the IP NOPFW
  !
  !
  control plan
  !
  !
  Line con 0
  no activation of the modem
  line to 0
  line vty 0 4
  privilege level 15
  Synchronous recording
  entry ssh transport
  !
  max-task-time 5000 Planner
  NTP 192.231.203.132 Server prefer
  end

  For this line of NAT:

  IP nat inside source static tcp 10.1.1.1 1723 59.167.239.185 1723-route bypass-portfwd expandable map

  Can you please try to remove it and change it to all the following:

  IP nat inside source static tcp 10.1.1.1 1723 59.167.239.185 1723 extensible