Are you asking which ports need to be opened in order to connect to the domain directly from the Internet? It would help if you could give a little bit more background as to exactly what you are wanting to accomplish. If you are wanting users to be able to connect remotely, using ISA as a VPN server is a much more secure way to allow domain login from the internet. Is this a single-server domain that you are wanting to enable remote access to or do you have a different goal in mind? I will try to give you a better answer once I know what your end goal is. Thanks, -Sean