Re: Basic Firewall IP filters

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Javier Gomez [SBS MVP] (javier_gomez_at_remove.this.engineer.com)
Date: 10/05/04


Date: Mon, 4 Oct 2004 22:17:31 -0400

Administrative Tools-> RRAS mmc-> %servername%-> IP Routing-> NAT/Basic
Firewall.

-- 
Javier [SBS MVP]
<< SBS ROCKS !!! >>
"Where do you adjust the firewall for SBS" <Where do you adjust the firewall 
for SBS@discussions.microsoft.com> wrote in message 
news:3B8EC7DE-8D5B-474F-8A00-5C56C0652839@microsoft.com...
> Where do you adjust the firewall for SBS 2003 STD.
> I can not find out how to port forward other devices and programs through
> the SBS nightmare firewall I need to see the control panel or program that 
> I
> use to control the SBS firewall ports. I need to control ports incoming 
> and
> outgoing.
> Any ideas where this is
>
>
> "Les Connor [SBS MVP]" wrote:
>
>> If the word 'filter' has you confused, and you are just wanting an
>> understanding, look in the rras help file, for example:
>>
>> Packet filtering
>> Routing and Remote Access supports IP packet filtering, which specifies 
>> what
>> type of traffic is allowed into and out of the router. The packet 
>> filtering
>> feature is based on exceptions. You can set packet filters per interface 
>> and
>> configure them to do one of the following:
>>
>>   a.. Pass through all traffic except packets prohibited by filters.
>>   b.. Discard all traffic except packets allowed by filters.
>> For more information about packet filtering, see Manage packet filters.
>>
>> For detailed information about IP packet filtering, including examples of
>> filtering configurations and fragmentation filtering, see "Part One:
>> Routing" at the Microsoft® Windows® Resource Kits Web site.
>> (http://www.microsoft.com/)
>>
>>
>> -- 
>> Les Connor [SBS MVP]
>> -------------------------------------
>> SBS Rocks !
>>
>>
>>
>> "jjjdavidson" <anonymous@discussions.microsoft.com> wrote in message
>> news:2935c01c4651e$376cd4c0$a501280a@phx.gbl...
>> > I've clicked "More information"; I've searched the SBS
>> > 2003 help; I've searched microsoft.com; I would have RTFM
>> > if we'd gotten one.  Here verbatim is the _most_ detailed
>> > help I've been able to find _anywhere_ regarding Basic
>> > Firewall packet filtering:
>> >
>> > ----
>> > Open Routing and Remote Access.
>> >
>> > In the console tree, click General.
>> >
>> > In the details pane, right-click the interface on which
>> > you want to add a filter, and then click Properties.
>> >
>> > On the General tab, click either Inbound Filters or
>> > Outbound Filters.
>> >
>> > In the Inbound Filters or Outbound Filters dialog box,
>> > click New.
>> >
>> > In the Add IP Filter dialog box, type the settings for the
>> > filter, and then click OK.
>> >
>> > In Filter action, select the appropriate filter action,
>> > and then click OK.
>> > ----
>> >
>> > I have spent literally hours searching for more detail
>> > than "type the settings for the filter" or "select the
>> > appropriate filter action".  I just want to know how the
>> > filters operate!
>> >
>> > The one default filter that is set up (by the ICW I
>> > presume) is apparently intended to drop "inbound" traffic
>> > _from_ my own network.  Why???  What does this filter
>> > really do?  I simply cannot figure out what Basic Firewall
>> > is going to do with "the settings" that I type.
>> >
>> > Thanks again!
>> >
>> > >-----Original Message-----
>> > >If you ran the CEICW (and you are using SBS standard
>> > edition), you will have
>> > >come accross the configure firewall section in CEICW. The
>> > selections you
>> > >make there configure the basic firewall. Clicking 'More
>> > information', or
>> > >using the on-line SBS help file will yield information on
>> > the basic
>> > >firewall.
>> > >
>> > >-- 
>> > >Les Connor [SBS MVP]
>> > >-------------------------------------
>> > >SBS Rocks !
>> > >
>> > >
>> > >
>> > >"jjjdavidson" <anonymous@discussions.microsoft.com> wrote
>> > in message
>> > >news:28a7f01c46512$986cf270$a601280a@phx.gbl...
>> > >> The server was set up by a third party.  But I've been
>> > >> thru the ICW again myself.  We have full LAN and WAN
>> > >> connectivity, e-mail, whatever -- that's not a
>> > problem.  I
>> > >> just want to know what the Basic Firewall IP filters can
>> > >> do, 'cause I can't find any documentation at all
>> > anywhere
>> > >> that says more than "type the settings for the filter".
>> > >> Surely Basic Firewall is supposed to actually be able to
>> > >> _do_ something?
>> > >>
>> > >> Thanks!
>> > >>
>> > >> >-----Original Message-----
>> > >> >Hi jj,
>> > >> >
>> > >> >You need to open the Server Managment mmc on the SBS,
>> > and
>> > >> click on the ToDo
>> > >> >list. Work your way through it from top to bottom. One
>> > of
>> > >> the items on the
>> > >> >list is 'Connect to the internet'.
>> > >> >
>> > >> >This runs the CEICW, short for 'configure email and
>> > >> internet connection
>> > >> >wizard'. This is the single most complex wizard on the
>> > >> server, and will make
>> > >> >the many configurations that are required to have the
>> > >> various servers
>> > >> >co-exist, and enable proper network connectivity.
>> > >> >
>> > >> >-- 
>> > >> >Les Connor [SBS MVP]
>> > >> >-------------------------------------
>> > >> >SBS Rocks !
>> > >> >
>> > >> >
>> > >> >
>> > >> >"jjjdavidson" <anonymous@discussions.microsoft.com>
>> > wrote
>> > >> in message
>> > >> >news:2918e01c46506$fea74240$a501280a@phx.gbl...
>> > >> >> I've turned on the RRAS Basic Firewall on SBS 2003,
>> > and
>> > >> I
>> > >> >> can't figure out how to use the IP filtering.  We
>> > have
>> > >> a 2-
>> > >> >> NIC configuration with the LAN card set to 10.0.0.1
>> > and
>> > >> >> the WAN card set to 10.1.1.2.
>> > >> >>
>> > >> >> What can the IP filtering be used for, and how do you
>> > >> set
>> > >> >> up filters?  Every MS help source I've looked at just
>> > >> >> says "type the settings for the filter" with no
>> > further
>> > >> >> explanation.
>> > >> >>
>> > >> >> For instance, Basic Firewall set up a single
>> > >> >> default "inbound filter", which I utterly fail to
>> > >> >> understand:
>> > >> >>
>> > >> >> Receive all packets except those that meet the
>> > criteria
>> > >> >> below:
>> > >> >>  Source Address: 10.0.0.0
>> > >> >>  Source Network Mask: 255.255.255.0
>> > >> >>  Destination Address: Any
>> > >> >>  Destination Mask: Any
>> > >> >>  Protocol, etc: Any
>> > >> >>
>> > >> >> This is an _inbound_ filter?  Inbound from where?
>> > The
>> > >> >> _source_ address and mask identify our own network's
>> > >> >> workstations.  What does this filter mean?  What
>> > other
>> > >> >> filters should I set up?
>>
>>
>> 


Relevant Pages

  • Re: Basic Firewall IP filters
    ... Where do you adjust the firewall for SBS 2003 STD. ... > Routing and Remote Access supports IP packet filtering, ... Pass through all traffic except packets prohibited by filters. ...
    (microsoft.public.windows.server.sbs)
  • Re: Linksys Firmware Upgrade Available
    ... First I will say that I have no experience with WinRoute. ... filtering -vs- personal firewall applications. ... Basic packet filters work by inspecting the pkt headers (usually the IP ...
    (comp.security.firewalls)
  • Re: Linksys Firmware Upgrade Available
    ... First I will say that I have no experience with WinRoute. ... filtering -vs- personal firewall applications. ... Basic packet filters work by inspecting the pkt headers (usually the IP ...
    (comp.security.firewalls)
  • Re: Firewalls and Cryptography
    ... greater than a firewall only device. ... layer 7 according to RFC 2979, if it filters away data with malware. ... network is one that doesn't allow any data through at all and that the only ... But in this case - and the reason I jumped in on this ...
    (comp.security.firewalls)
  • RE: IPsec vs any personal software firewall
    ... This prevents the source port 88 issue. ... It is possible to bypass the filters and contact a service listening on UDP. ... Should you use it if you have a firewall running externally of the machine? ... IPSec filters are not a replacement for a firewall. ...
    (Focus-Microsoft)