1 server 2 nics DSL LAN/WAN? 1

[audiopimp]

Hi. I'll try and be breif but no promises. I'm hoping someone here will be able to guide me in the right direction or reference of some kind.
The Given :- 1 Office - 1 Server (winNT SP6a) - 4 manager PC stations (Win 982ndE) - 5 Workstations PC (win 98 2ndE)- 1 16 port 10/100 switch - 1 DSL line Modem - : the server is to be used by all PC's, its running a Dialer and writes and reads into a master DB (Most simply put).
The Problem :- I only want the manger stations to have access to the Internet WAN, the other 5 workstations I do not want them to be able to get onto the Internet, only our small LAN while all this protectiing my server from the WAN.
Some Ideas - A buddy of mine told me i can easily do this by installing 2 NICS on my server. One to handle the WAN and the other the LAN. But after this I am lost. Is there a software I need to do this? Am I going to have to install DHCP on the 4 manager stations and static IP's on the 5 other workstations?
I know im almost there but can someone please help me out here? Any good web sites I can check out if its too long to explain.
PS> I did manage to do pretty much what I wanted with the help of a router. The Linksys Router software allows me to block certain IP's ect. Please note: I'd like to do it without the router as described above. Is it possible from the information I gave you'all?
Regards, Mark - Steve

 

[Dmasch]

It is possible but for the prices of routers now adays I would recommend (hardware) not software firewall/router. Ask yourself this...what are you going to use as a firewall to protect yourself on the wan side?
You can configure the server to have 2 nics inside of it and use one for the lan and one for the wan but with what you are trying to do with blocking ip's from using it and your other situations...I do consulting for just this type of setups and I would suggest a hardware router. I recommend using dlink for the cheaper way but if money is no issue you could pick up a nice sonicwall router for under a 1000.

 

[GaryL]

I vote with Dmasch
No way I want my backside (public NIC) exposed (pick a Win2k security patch of the day) and all that burden put on the server, even if it is a small office. Use the Linksys. You
You can setup your Internet accessible guys to use DHCP, giving them gateway and DNS info.
5 workstations, I'd give the static IP's outside the DHCP scope range with no default gateway or DNS info.
As long as you don't have any tech wannabes on the 5 workstations, they won't figure it out.