Re: Need help with specific router/Win2003 server setup

Hi Martijn,
On Server B, in RRAS, I would remove the configuration and then set it up
again as I described, with a custom configuration, LAN routing only. You are
not routing between the internet and the LAN, you are routing between two
LANs. Your ADSL router is doing the routing between the internet and the
LAN. You don't want NAT or VPN on your RRAS configuration. You already have
NAT on the ADSL router. For the time being you also don't want to filter
anything on Server B, just let the traffic that is allowed by your
firewall/router through to Server C,
Lets see how that goes,
Anthony, http://www.airdesk.com




"Martijn Tonies" <m.tonies@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:473c60be$0$4178$e4fe514c@xxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello Anthony,

You've told us it is not working, just from your posts we don't know
_where_
it is not working. I am trying to narrow the problem down to exactly
where.
So far we've established that your server B is routing between the
subnets
and that the firewall is allowing specified inbound traffic.

Yes, it allows traffic to 192.168.1.100 (Server B, "external" card) and
runs
websites from it.

As I said, a flat subnet, or a VLAN, would do this for you more easily,
but
doing it with a dual NIC in one server makes it more difficult to track
down.
Next questions (two)
- exactly how are you testing that outside traffic can not reach Server
C?

Using telnet to the public IP address on a port that is open. In W2003,
Routing and Remote Access, I opened up the port under "NAT/Basic
Firewall", card "external" on tab "Services and Ports". If I do that, I
immediately
get "connection lost" when I try to telnet, if I disable the port on that
tab,
I get "Could not open a connection to host on port xx".

- did you set up the RRAS on Server B as only LAN routing (RRAS

Is RRAS "Routing and Remote Access", from reading the Help on that, it
seems so.

Configuration, Custom configuration, LAN routing)

I cannot find what you are asking me.

or have you also set up
VPN and NAT?

On "external", the radiobutton "Public interface connected to the
internet"
is checked as well as "Enable NAT on this interface".

On "internal", the radiobutton "Private interface connected to the private
network" is checked.

Thanks for the help so far Anthony.


--
Martijn




.

Loading