Re: Comcast Business Class to SBS2k3 w/ISA

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Alison <Alison@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Yes, I have it setup using Untangle in bridge mode between the
SMC8014 from Comcast and the SBS WAN port, I could reconfigure easily
enough to use Untangle as a router instead and NAT from it to the WAN
port, I guess. But Comcast is telling me to set the public IP right
onto the WAN NIC of the SBS box and make the Gateway for the LAN on
that same subnet using their
75.xx.xx.223 Gateway address.

Yes, I am using ISA on the SBS box - I assume that will protect me if
I put the public IPs on the WAN nic itself, no ?

Theoretically yes, but I'm probably not the best person to ask.

I had the untangle box setup to NOT do NAT. Since I have ISA, I don't
need NAT on the Untangle box in the middle too, do I ?

I'm not an ISA person, but I think I'd want it to do NAT, yes. I've never
liked the idea of making my server do that.



"Lanwench [MVP - Exchange]" wrote:

Alison <Alison@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Just got Comcast installed with a static ip from an SMC 8014
I have never used this device before. They are telling me to just
put the public IP directly on the WAN port of the SBS (dual nic)

Are you using ISA?

? and use
their public gateway on the SBS.

Eek, no.

They say it acts like a bridge that way and passes everything. No
NAT, no Firewall, no DHCP
75.xx.xx.222 /30 for the public to the exchange server etc and
75.xx.xx.223 for the LAN gateway

I do have an Untangle box in between, set as a bridge for my
firewall

The Untangle box should be doing NAT, right? Not sure what you mean
as "set as a bridge for my firewall" - isn't untangle your firewall?
Don't use public IPs on your NICs.

Anything wrong with doing it this way ?

Is there a better way to configure Comcast on an SMC8014 to an
SBS2k3 than this ?

TIA



.

Relevant Pages

  • Re: Comcast Business Class to SBS2k3 w/ISA
    ... Untangle as a router instead and NAT from it to the WAN port, ... Comcast is telling me to set the public IP right onto the WAN NIC of the SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: Comcast Business Class to SBS2k3 w/ISA
    ... Comcast and the SBS WAN port, I could reconfigure easily enough to use ... Untangle as a router instead and NAT from it to the WAN port, ...
    (microsoft.public.windows.server.sbs)
  • Re: Linksys firewall question
    ... >> to lan ip filtering... ... > Firewalls don't have to do NAT, in fact, firewalls only implement NAT ... All of them can do a 1:1 mapping of WAN side public IP ...
    (comp.security.firewalls)
  • Re: TCP/IP Services SSH and new router difficulties
    ... thing, like the NETGEAR, for WAN and NAT) and got another Sitecom ...
    (comp.os.vms)
  • Re: Linksys firewall question
    ... Firewalls don't have to do NAT, in fact, firewalls only implement NAT as ... All of them can do a 1:1 mapping of WAN side public IP to LAN ...
    (comp.security.firewalls)