Networker through firewall clarification

[Chapter11]

I'm researching setting up Networker (server is 7.1.3) on some of my DMZ'ed machines again. I've never found the documentation to be terribly helpful for this so, I'd like to get a second opinion from anyone with some experience before I muck around with my live machines:

Networker Server is 7.1.3, in our main network. the 232TPC rule is 141.
There are 3 DMZ clients

Now, the server will need to be able to talk only to ports 7937 and 7938 on machines in the DMZ.

Clients in the DMZ will needs to be able to connect with 7937 through 8078 (7937+141) on my server. Is this correct?

(The unpleasant part is that I have to set up an individual rule for each open port). We also don't terribly much like opening up such large ranges, but it looks like it's going to be necessary.

 

[bse1969]

I am going to go out on a limb and guess you are running server on Windows. In the Networker GUI You can goto Options -> Configure Ports... Then you can put the client name in of one of your DMZ clients and limit the ports to just one service port and one connection port or at least shrink the ranges a bit.

 

[mgdaviso]

Networker 7.2 can do with a much lower range of ports opening - I would suggest moving up to 7.2

Mike davison
mike.davison@avon.com