I have a single NIC DC server set up for a few local client machines to mainly serve Files and provide a consistent computing environment across local client workstations thru Folder Redirection.
Recently, with the addition of VPN thru RRAS (Routing and Remote Access), the windows firewall had to be disabled because they can not function concurrently.
How important is it to have a soft firewall even though the server is behind a HW NAT router?
How does one set up a firewall that will permit MS Exchange, DNS, DHCP, VPN, Domain Controller to continue to function with the local and VPN clients, but block other traffic? (Windows Firewall used to open ports automatically)
After setting up RRAS as shown by http://www.onecomputerguy.com/networking/w3k_vpn_server.htm I looked at http://technet.microsoft.com/en-us/library/dd772723%28WS.10%29.aspx and found a list of ports that need to be opened LDAP 389 and DNS TCP and UDP 53.
To open the ports:
1.) Open RRAS snap-in 2.) Expand Server -> IP Routing -> NAT/Basic Firewall 3.) Open Service and Ports Tab 4.) Manually add each port (ie, LDAP, DNS, HTTP) ports into the list
--Is that the correct way to do allow for the server roles to continue working with client workstations on the LAN and VPN?
DC System: Windows 2003 standard x64
Network Environment: Single NIC - Domain Controller behind SOHO HW NAT router several windows client workstations connected to the SOHO HW NAT router
Server Roles: Domain Controller Active Directory MS Exchange 2007 DNS DHCP