A single NIC Windows Server has a number of services, for example FTP.
The same machine is also running Routing and Remote Access to provide VPN/NAT services to remote users. Meaning users who connecting who then browse the internet see the servers IP address.
I want to hide my FTP service so that the port (say port 123) is only accessible to users who are connected via the VPN, or are on the machine itself. I want port 123 hidden to the internet.
While the web is saturated in information on how to open VPN ports on a firewall, I can't find anything on how to restrict a port to VPN only users using the Windows Firewall.
Since Routing & Remote Access issues clients IP addresses from a defined IPv4 pool. I first tried adding this range to the Remote IP Addresses on the ALLOW rule. I also tried the servers public IP. However, all of this just prevents the connection. Only if the rule is set to 'Any IP Address' can the port be accessed.
How to open a port on Windows Firewall for VPN only users?