Seting up internal routing using Windows 2000 server???

[getochkn]

Ok, I have a server running windows 2000 server. It has a cable modem internet connection that is shared across my network that is running a combination of XP/2000/ME machines. I only have the 1 IP from the cable and the rest are just internal 192.168.blah.blah The problem is that I would like to be able to access say a web server on a 2000 machine or remote web desktop from the internet on my XP machine. Of course they can't be access externally because of the internal IP's. Can windows 2000 server be set up to redirect any external routing to an internal machine. I don't have a lot of experience in this area, but am quite capable with Windows, etc. Just If someone can tell me if it can be done and maybe give me a few steps or point me in the right direction, i'd be appreciated. Thanks in advance.

 

[gbiello]

Sounds like you want to do Port Address Translation, as in redirecting something that comes to your internet machine at port 80 to an internal machine at 192.168.x.y. If this is the case, I'm pretty sure that's beyond the capabilities of Win2K. 3rd party software to do this may exist, but I am unaware of any.

If I've read too much into this, and all you want to do is browse the web from your internal machines, your best bet is probably to set up Internet Connection Sharing. Check out thread96-80045.
-gbiello

 

[jjgraf]

You can by a router from Linksys for around $150 to $199 which would do what you want and is very easily setup.

Use one at a remote site in flordia

http://www.linksys.com/products/group.asp?grid=5

btw it's a NAT and offers some securtiy features which slows hackers down

hope this helps

 

[CoolClark]

Install NAT on your Win2K server. With NAT you can map ports to ip addresses on your local network. NAT works like ICS but with greater functionality. Once you have NAT installed you can go into the properties of the NAT interface and select the "Special Ports" tab. From here you set up what ports can access your local network. Just remember any ports you open up will be accessible from the internet. If you need help with the install or have questions just ask.

 

[gbiello]

...looks like I was wrong, and you can translate the ports, like CoolClark says. That sounds like it will solve your problem!

 

[getochkn]

Thanks guys. That seems to be what I need. I do lots of stuff with Microsoft Project that I have setup project central, plus a web server on another machine plus the remote desktop thing with XP. I'm trying to get away without getting a router or paying for 5 extra IP's from my cable company at like $5.00 a piece. I was hoping Windows 2000 server would help me since I dumped so much into it I'll give it a shot this weekend and post if I have any questions. If I open the ports like you said, should I run something like Zone Alarm on the rest of the machines to be sure that they are secure? Thanks again Guys.

 

[jjgraf]

question did you just buy W2K or did you by Backoffice ?

If you Own Back Office you can use ISA which is a Firewall and Webcache
just an FYI

 

[CoolClark]

I use one machine as my firewall. I set up NAT, IP Filtering and ZoneAlarm on that machine. So far this has worked. If your trying to set up access mainly for yourself such as when your at work and you want to access your web site at home you can increase your security a little by using non-standard ports.

Ex. instead of setting "Special Ports" to translate port 80 to port 80 on your local machine you can set port 12345 to translate to port 80 on your loacl machine. This would prevent alot of the viruses and such from "seeing" your web server and you could access it by

http://youripaddress:12345

.

While this isn't a perfect solution it does give you a little more security.