Windows Forum

Ask something
Discussion Locked

Second guessing my TCP/IP Knowledge...

0 helpful
7 replies

by leonidasromero

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,

I currently have two new NT 4.0 boxes (6a SP). The first box is the main server (user files, e-mail , etc.). The second box is BDC, and VPN, RAS. 2nd machine also has two NIC cards. One to internal network, one to DSL connection to Internet. We are using a 10.10.0.X internal network addressing schema and have received our info from vendor on our outside IP's. My question is this: I currently have no gateway setup for the internal IP list. SHould I have one, and if so what should it be (NT box 1 or 2 or something else)? I am second guessing myself, and would love some help.

Thanks,

Leo Romero

7 replies

by stecker

Leo,

Before you do anything, you need to investigate your options with utilizing a firewall. You HAVE to protect your network from the outside world. Simply routing your network to the Internet is not your only issue.

You are in need of some sort of address translation scheme in your network, that will intercept IP traffic, view the destination, and route it to the correct destination. Almost any firewall product has this feature built in. Don't know how much you are looking to spend, but even $10,000 spent now, can save you from recreating years worth of data. Check out Symantec's offerings, www.zonelabs.com, or a really sweet one www.lightspeedsystems.com. You can spend anywhere from free to tens of thousands of dollars for a firewall.

However, this will give you the internal routing table you are looking for as well, which will get your internal machines to the network.

by redshift

Your gateway address entry on your client machines and PDC should be the internal NIC's addy.

NT will route for you, as the last person stated, and they are correct in their assertion that a firewall is necessary. One caveat, though, is that the10.10.0.x range may not be secure in that 10.x.x.x is routeable. Go with the 90.x.x.x range instead.

I strongly recommend a proxy server as this would greatly simplify matters (your BDC woiuld be fine for this), and possible save you some money in the long run. I recommend Winproxy from Ocitis software. Get a 30 day trial version at www.winproxy.com. Registration is $60 for a 3 user version, and like $10 or $15 for each additional user.

by leonidasromero

Thank you for the good idea. I actually went with the more expensive MS Proxy package, but I got a good deal on it. I did make the changes and things are running smoothly.

LR

by madsg

I would set up the BDC as a proxy server, if the other machines shoud have internet access, and on the clients configure the proxy settings in the browsers to the internal NIC.
And also configure the default gateway to that NIC.

And for securityI would not setup routing, but just use proxy.

Mads

This discussion is closed to new replies.