RRAS between an isolated segment and a domain

[Anton Federkiewicz]

Hi all,

Just a quick RRAS question for you. I have a win2k server that I want to
act as a router to an isolated network. The server currently serves the
isolated segment as a WINS server and a DHCP server. Once I enable RRAS as
a network router will outside clients be able to access the machines inside
the isolated segment? Is there a way to set up a user based security
scenario?

Thanks

 

[Phillip Windell]

Just because a user can get across a router doesn't mean they can access
anything there. That what Window's NTFS Security is all about. Get out of
the "rut" of thinking that Layer3 Routing Security is the only security that
exists.

Yes, RRAS does have some packet filtering ability,..... that many people use
to foul things up more often than they do to make things secure,....but yes,
they are there to use if you wish.

299810 - HOW TO: Configure Windows 2000 to Be a Router
http://support.microsoft.com/default.aspx?scid=kb;en-us;299810