Restore AD objects to DCs in different networks

[knutho]

Been searching the forums for a while, but I couldn't find anything on the subject.

To do a restore of AD-objects to a DC in a different network than our Veeam-server we need to open ports in the firewall.
My question is what kind of traffic we need to allow from Veeam server(running the AD-restore wizard) to the target DC.
For testing we have allowed traffic on all ports between the Veeam-server and the target DC, but it would be nice to allow only necesary traffic.

Our setup is similar to the discussion in http://forums.veeam.com/viewtopic.php?f=24&t=11777

Thanks in advance for your advice.

[foggy]

I assume that Veeam B&R console would need the same ports that are required to manage this domain using native tools (e.g. AD Users and Computers) - LDAP, Global Catalog, RPC...