Port Forwarding,RRAS, and multiple IPs..

[kcostain]

Hi All,

I'm hoping one of you have worked on this or had to deal with this in the past.. I've had decent success with Windows 2000 Server (and its derivatives) but on Windows Server 2003 I just can't get it to work.

Let me preface all this by saying I've tried it configuration on most of the derivatives o Windows Server 2003, Enterprise, Standard, Web, with the exception of Small Business Server actually.

Here is the problem, put in a basic sense. I have a Win2k3 server (directly on the Internet) with an IP block of 14 IP addresses usable x.98 to x.111. All of these IP addresses are exposed and available via the TCP/IP properties - > Advanced Tab. I have 5 domains that run various services (WEB, FTP, EMAIL) with various applications. All is running normally.

I also provide NAT services to the local network. I have a local interface (192.168.0.6) that gets the network out to the internet via the second network card. All is still running normally as the external services are not effected.

Now to the problem - I have a Citrix MetaFrame server behind this server at local address 192.168.0.3. As you may or may not know, the two ports required for a Citrix connection to work are 1494(TCP) and 1604(UDP). When I attempt to forward the ports from the 0.6 server to the .03 server I never end up seeing the ports open (using a number of utils, including netstat -a).

I wonder if anyone has had this same problem, or something similar?

 

[kcostain]

More information:

- After enabing the "Basic Firewall" in RRAS, and then configuring each port to either route to an IP Address locally or to another computer, the forwarding of ports was rectified and the firwall was working as well.
- Once I enable the "Basic Firewall" now NAT is not working, I can manage to give specific computers access to the Internet by using the "Reserve public addresses" and uing up one of my IPS - but of course this is not a viable solution.


I'm looking for the reason why NAT has failed and maybe soem mroe information on why the Firewall needs to be enabled to get forwarding to work?