you need to enable the domain controllers to replicate between the two sites which traffic should you permit through the firewall