Re: VPN Windows 2000



I am with you 100%. I never and I mean NEVER allow a server to be outside of
a firewall. Net protocol (FTP,HTTP,SMTP, etc) servers reside in a firewall
protected DMZ and communicate with SQL servers, etc... within the intranet
through very controlled limits.

I have personnaly used port forwarding for PPTP (port 1723) to access my
office remotely for years and have never had problems. More over I would not
feel comfortabkle with anything less since my client data is of a sensitive
nature.

cheers,
James



"cptkirkh" <khill@xxxxxxxx> wrote in message
news:1155608042.616820.278460@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I inherited a network that uses 2000 server for the VPN. The server
has two nics one for the external and the other for the internal. Did
this device really need to have two nics? Isn't that a little
dangerous placing a windows box outisde of the firewall? Can't
i just tell my PIX to port over VPN to that particualr box and use one
nic with the internal Ip address? If so what ports do I need port
over? thanks for your help.



.



Relevant Pages

  • Website setup questions.
    ... Create firewall rule to direct HTTP port 80 to the SBS External NIC ... Create firewall rule to point DNS port 53 to the SBS External NIC ... NICS to get this request to not timeout or be refused. ...
    (microsoft.public.windows.server.sbs)
  • Re: Help In network configuration.
    ... port of a router. ... 2] I will run a cable from Internal Port of router to the ... external port of firewall. ... Servers Switch. ...
    (microsoft.public.win2000.networking)
  • Re: What is this?
    ... >This event is generated when TCP traffic to port 0 is detected. ... This fails on a properly set up firewall. ... accessible DNS servers - one in the DMZ, and two located at our upstream. ... All internal DNS requests go to servers behind the firewall, ...
    (comp.security.firewalls)
  • Switch Questions
    ... Obvioulsy, with only one gigabit port, I can ... only hook one of the NICS on one of the servers to it. ...
    (comp.dcom.lans.ethernet)
  • Re: terminal services quirkyness question
    ... When you ssh into your Firewall you are Basically inside your Network ... will have to change the default port that TS listens too... ... Open the Ports in your Firewall and Point them to your servers, ...
    (microsoft.public.windows.server.sbs)