Access via port 8080 only

[wmachin]

Hi,
I need some help and/pointers in solving an issue I'm having.
I'm running two networks that are physically connected but are kept seperate via subnetting. One is the "Admin" network and the second is the "Curriculum" network. The premise is that the admin network can see the curriculum network but NOT the other way around. So therefore, the admin network has a 10.122.165.x address range and uses a 255.255.252.0 and the curriculum network uses a 10.122.164.x address range and a 255.255.255.0 subnet. This works fine and is exactly what we need. BUT....

We are looking to run an intranet based system that runs on the Admin server on port 8080 via Internet Explorer. The problem is that we need it to be accessed from the Curriculum network. This needs to be done without opening access to the admin server/network. So, I've had a think about it and I think the best way to go is adding a second network card to the Admin with a 10.122.164.x address and 255.255.255.0 subnet but only allowing access to port 8080 and NOT allowing any normal/network access on that card. So if it's not a port 8080 request then it's blocked.

Can this be setup in Windows Server 2003 and can anyone see any problems or potential security issues with this?

Thanks in advance for any suggestions and help with how to go about setting this up.
Cheers,
Will

 

[aftertaf]

i dont have any better suggestions. my advice is to go and try it...

i'm in a similar setup on our corporate network, installing a test lab for exch 2003 for learning purposes. and to be honest i've got 2 servers linked with a crossover cable cos i daren't have them on the corporate lan...


Aftertaf
We shall prevail, and they shall not

 

[wmachin]

Any pointers on how to set this up? Can you use Windows to block requests to a network except for port 8080? Or will I need to find some firewall software?
Thanks for your help.

 

[llevon]

This might be what you are after.

Go into the properties of the new network adapter
look at the properties of TCP/IP
click on advanced
select the tab options
change the TCP Ports section from permit all to permit only and add ports 80 and 8080 for http access

Regards

llevon

 

[wmachin]

I think that's exactly what I was after. Thanks a lot