Windows Server 2008 R2 SP1, running the Edge role of Lync Server 2010.
One internal network interface connected to the company LAN, configured with a private IP address, subnet mask, internal DNS servers and no default gateway.
One external interface connected to the Internet, configured with three public IP addresses, subnet mask, no DNS servers and a default gateway.
No other firewalls between the server and everything else, so I need to protect it using Windows Firewall.
What I want:
- No protection on the internal interface, the server should be able to freely communicate with the internal network.
- Full protection on the external interface, only the bare minimum ports and protocols required for Lync should be opened.
How do I configure Windows Firewall for this?
The server is configured to treat the external network as "public", but the internal one is automatically classified as "unknown", because that interface doesn't have a default gateway (and it shouldn't have one, routing should only happen on the outside interface); so it is treated as "public" too, and this can not be changed.
Windows Firewall is currently turned off on all network profiles; it shows that the server is connected only to "public" networks, not "private" or "domain" ones.
Using Chris S's suggestion, I was able to configure the internal network as "private" and the external network as "public"; then I turned on Windows Firewall, configured the private profile to allow all traffic, and left the public one as default (block all except exceptions).
But I'm still able to RDP/SMB/RPC into this server from its public IP address... what's wrong here?