How about a network diagram (ascii art will be fine) showing what you have and how it'a all hooked together. That way we will have a better idea about what we are dealing with.
How about a network diagram (ascii art will be fine) showing what you have and how it'a all hooked together. That way we will have a better idea about what we are dealing with.
My understanding of TCP/IP routing and networking in Win2K is limited, but basically I want a TCP/IP port on a machine on my local network to be available as if the PC itself was connected to the internet directly. Therefore I need to configure the Win2K Server which is directly connected to the internet to route the TCP/IP port. The question is How?
Alex
Mm, that only helps if you know what you're doing in the first place. Every time I try to set up a Static IP route - which I presume is what I need, it insists that "The network mask entered is not valid - The destination address cannot be more specific than the network mask" (192.196.0.xxx, 255.255.255.0) At which point I get a headache......
Alex
| Internet | | W2k Server | | PC with IP port | ^ ^ ^ | | | Various pc's Port 913 on the RH machine shown here needs to be accessible from the internet by anybody, by entering a url http:/ /xxx.xxx.xxx.xxx:913, asif the server isn't in the way. Alex
Ive not read those links, but if you are adding a route to an exact IP - eg 192.168.0.5, then your subnet mask should be 255.255.255.255
this will only allow stuff to that one IP and would explain the 'more specific' error as 192.168.0.xxx/255.255.255.0 would allow
192.168.0.1-192.168.0.254 in theory.
That seems to make sense. I shall see what happens.
Alex
It would be much easier to get a router and just set up port forwarding on that ;) Or install something like smoothwall on a spare PC and use that as your internet gateway (it does a better job than the windows stuff!). I hate setting up the windows server routing+remote access stuff.
Are you using something like ISA or ms proxy on the server? If so then why!?
Nope, just Win2K Server. And It still doesn't work. If I try to connect to the server, it simply says "connection refused"
As for a router, I'm beginning to think it might be easier. But can a router also be set up to do VPN? That's something I'd also like to get running, so I can link the two networks via the internet. Which would also partially eliminate the need to have this port routed through the server.
Alex
Your nice little diagram doesn't tell us what the "internet port" is and how you connect to the internet. Have you opened the required port there as well as on the Win2k server?
Shields up! on grc.com is handy for checking the state of ports on a target public IP.
Many can, just make sure that it is in the spec for the router.
Just get a router :)
Set up port forwarding on the router to route incoming specified port connections as required to the ip address of the relevant machine.
And of course a hardware firewall will all ports closed excepting ones you specify is a good thing to have.
Regards.
Port forwarding is easier to set up when the machine have static ip address also. my lynksys routerm does port forwarding an VPN passthough. i use neither, lol
PC with IP port |
=A0 =A0 =A0^ =A0 =A0 =A0^ =A0 =A0 =A0 ^
=A0 =A0 =A0 | =A0 =A0 =A0 =A0| =A0 =A0 =A0 =A0|
=A0 =A0 =A0 Various pc's =A0
Hi Alex,
You need to install and configure Routing and Remote access. This can do network address translation. Routing on it's own won't work as your
192.196.x.x address is probably used by someone else on the Internet.Once installed, you need to add in the NAT protocol - the following link describes this.
Than to allow port 993, click on the Setting button. Add a setting for your port 993, and tell it which machine will host the service.
After that, any packets received on port 993 on the Internet connection will be forwarded to the IP address you've just mentioned.
If you want more help, email me on gcarter(at)mweb(dot)co(dot)zw
Cheers! Graham Carter Harare Zimbabwe
Have something to add? Share your thoughts — no account required.
Ask the community — no account required