Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Configuring Filters In NAT

Status
Not open for further replies.

DJUDX

Technical User
Joined
Sep 16, 2004
Messages
3
Location
US
Hello. I have tried this for days and even maybe more (spent lot of time looking arround microsoft website) and I just can't seem to get it working.

The OS is Windows 2003 evaluation copy and I simply wanted to set up NAT (which I did get to work) so my other computers have Internet. I do have a router but I wanted to do this through Server computer.

So I did that and now I want to apply specific filters and this is where problem is. I was able to successfully block for example Receive mail in outlook, however what I wanted to do is to actually permit only internet for client computers.

With that in mind I have tried numerous ways of configuring inbound and outbound filters but I haven't been able to achieve what I need (again, Permit Only Internet).

I was able to block the internet (outbound on public interface, Source port 80, Transfer all packets but those), and thought that with reverse engineering (click Drop all packets) would work but it does not.

What am I missing, or this is not just possible through those filters (maybe going to Active Directory - I was thinking of doing this simple way not AD)?

I found a publicip.net distribution of linux that does this, however, I would want to stick with Windows 2003 (so it should be possible if publicip.net which is free is capable of doing this)

Thanks for any ideas/thoughts

 
I think I found a solution to this.

These are set on Public Interface (external NIC)

Inbound Filters - Drop All Packets but Selected)

Source Any (IP address and mask)
Protocol TCP - Source Port 53
Source Any (IP address and mask)
Protocol UDP Source Port 53
(I think these are needed regardless because of the DNS resolving host names to IP addresses)
Source Any (IP address and mask)
Protocol TCP Source Port 80
(just Internet)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top