muchgooder;572074 Wrote: 
> Thanks so much for your response - I am running windows server 2008.  So
> if I am to understand what I have read in other places, I can install
> one of these clients and restrict it to an IP/Domain range?  If so, can
> you recommend a good one for Windows?

I don't know if there is a port knocking server for windows (something
that automagically changes your firewall rules).

So in your case, the simplest method is two steps:

In your router configuration there should be some settings for what to
pass through.  "Port Forwarding" or something similar is what it would
be.

You would tell your router, "all connections on ports 3483 (both tcp
and udp) and connections on port 9000 (tcp) should go to
whatever-the-ip-of-your-server is."   (Your server should, then, have a
static IP on your network so you don't have to change these rules if the
router gives it a new IP.)

If your router lets you, you may also be able to restrict it by source:
ie, only packets from 1.2.3.4 should get through to my server on these
ports.  But many routers don't let you specify things like that.

Then you need to make a change on your server machine: on the SBS
settings interface, under Advanced -> Security there is a setting for
allowed clients.  here you would want to specify both your own network
(likely to be 192.168.1.0/24) as well as the IP of your inlaws.  Add in
127.0.0.1 as well.

Then hold your breath and set the "block incoming connections" pulldown
to Block.

You may or may not also have to allow the same ports in any firewall
software you're running.  Just like your router, if you can specify the
source address, it's good to do that.  Layers of security are good.

Then set the radio to connect to your public IP (ie, the router's IP
which you'll see on any pages that do "show me my ip") and you're
done.

The radio will connect to that IP... the router will realize it should
port forward those ports and send it onto your server, your server
firewall should see it and pass it, and SBS should see it and act on
it.


-- 
snarlydwarf
------------------------------------------------------------------------
snarlydwarf's Profile: http://forums.slimdevices.com/member.php?userid=1179
View this thread: http://forums.slimdevices.com/showthread.php?t=81495

_______________________________________________
Radio mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/radio

Reply via email to