Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have server which IP address is whitelisted in some external system. And also, I have a few software developers with dynamic IPs which develop software and they need to connect to external system, but their IPs are not whitelisted, and cannot be whitelisted, because they are dynamic ones.

So, I have server with IP which connects to external system and that system knows (by firewall rule, etc) that is in white list and allow connection. But developers have dynamic IP (a few class B networks, no way to whitelist so many addresses).

Is there any software, TCP/IP port forwarding proxy, or whatever the correct name is, to allow developer connect to external system using server IP address? So instead of IP address of external system developer will connect to server and server will forward traffic to external system.

I do not want to force developers to install some proxy client or change system-wide settings other way.

Update: I'm really really sorry. Server is Windows Server 2008 R2. I missed so important information :-(

share|improve this question
Does the network topology look like this: Client w/ dynamic IP <---> Intermediate Whitelisted Server w/ static ip <---> Target Server ( – Ihor Kaharlichenko Aug 20 '12 at 13:00
What OS is on your intermediate (proxy) server? – Ihor Kaharlichenko Aug 20 '12 at 13:00
We really need to know what OSes are involved before making any sort of informed recommendation. – Chris S Aug 20 '12 at 13:26
Windows Server 2008 R2 on server. Various Windows OSes (mostly Seven) on developer machines. – adontz Aug 20 '12 at 14:15
@IhorKaharlichenko, it looks like this: Client w/ dynamic IP <---> Intermediate Whitelisted Server w/ static ip( <---> Target Server – adontz Aug 20 '12 at 14:17
up vote 2 down vote accepted

One of the options is setting up a VPN - a Virtual Private Network. One of such solutions is OpenVPN.

Though you don't want clients to install anything, thus you may need an alternative.

The alternative might be DNAT. Its configuration depends on OS that is installed on your intermediate server. In case you want your clients to authenticate somehow you may consider port knocking.


Since you said your server runs Windows Configuring Network Address Translation (NAT) in Windows Server 2008 article might help.

share|improve this answer

Take a look at the Squid proxy server ( ) - It's a pretty decent transparent/gateway proxy server that client machines won't need any awareness of.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.