port forwarding

[Newbie]

Hello,

We have Windows 2003 Server w/2 NICs.
One nic is for internal, and the ip is 192.168.1.1
Another nic is for external and uses public address.

Can I setup public ip address port forwarding to different computers and How?

i.e.
Port 80 for ip 192.168.1.101
Port 21 for ip 192.168.1.102...

Thanks

 

[Debo]

On Jul 13, 6:30 pm, Newbie <New...@discussions.microsoft.com> wrote:
> Hello,
>
> We have Windows 2003 Server w/2 NICs.
> One nic is for internal, and the ip is 192.168.1.1
> Another nic is for external and uses public address.
>
> Can I setup public ip address port forwarding to different computers and How?
>
> i.e.
> Port 80 for ip 192.168.1.101
> Port 21 for ip 192.168.1.102...
>
> Thanks

Yes, install Routing and Remote Access (RRAS) and configure the NAT/
Basic Firewall. Under this configuration there is a tab called
Services and Ports. This will allow you to configure port forwarding.

 

[Ryan Hanisco]

NEwbie,

Debo is right that you can take care of this with RRAS. I will tell you
that this is generally a bad idea as it is a back door into your network. If
this machine is compromised in any way, it means that an attacker or program
will have access into your internal network. Not a very good thing.

Most people will enforce more solid boundaries by segmenting machines into
internal and external resources. You should look at your security
requirements and the reisk you are willing to take with the machine. I would
also suggest letting your router or firewall do that conditional forwarding
to the server rather than having the server do it. You'll get much better
perfromance letting a device that is built for that do it as well as the
additional security that comes from the platform.

Hope this helps.
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"Newbie" wrote:

> Hello,
>
> We have Windows 2003 Server w/2 NICs.
> One nic is for internal, and the ip is 192.168.1.1
> Another nic is for external and uses public address.
>
> Can I setup public ip address port forwarding to different computers and How?
>
> i.e.
> Port 80 for ip 192.168.1.101
> Port 21 for ip 192.168.1.102...
>
> Thanks
>
>
>

 

[Debo]

On Jul 14, 9:10 am, Ryan Hanisco
<RyanHani...@discussions.microsoft.com> wrote:
> NEwbie,
>
> Debo is right that you can take care of this with RRAS. I will tell you
> that this is generally a bad idea as it is a back door into your network. If
> this machine is compromised in any way, it means that an attacker or program
> will have access into your internal network. Not a very good thing.
>
> Most people will enforce more solid boundaries by segmenting machines into
> internal and external resources. You should look at your security
> requirements and the reisk you are willing to take with the machine. I would
> also suggest letting your router or firewall do that conditional forwarding
> to the server rather than having the server do it. You'll get much better
> perfromance letting a device that is built for that do it as well as the
> additional security that comes from the platform.
>
> Hope this helps.
> --
> Ryan Hanisco
> MCSE, MCTS: SQL 2005, Project+
> Chicago, IL
>
> Remember: Marking helpful answers helps everyone find the info they need
> quickly.
>
>
>
> "Newbie" wrote:
> > Hello,
>
> > We have Windows 2003 Server w/2 NICs.
> > One nic is for internal, and the ip is 192.168.1.1
> > Another nic is for external and uses public address.
>
> > Can I setup public ip address port forwarding to different computers and How?
>
> > i.e.
> > Port 80 for ip 192.168.1.101
> > Port 21 for ip 192.168.1.102...
>
> > Thanks- Hide quoted text -
>
> - Show quoted text -

I agree on all accounts...