IP Filtering in Windows 2003 Server

[pgudge]

I have a Windows 2003 sat on the LAN. On the LAN is a ADSL modem router
conencted to the internet.

The Modem/Router does not support IP Filtering so I am left trying to
get the Windows 2003 Server to do so.

What I require is this:

From my home internet connection IP address (for example) 1.2.3.4

Remote Desktop to the Server at 4.3.2.1

I have port forwarded 3389 from the modem/router to the servers IP
address, and everything is connecting fine, every one on the net
literally.

How can I tell Windows 2003 to only allow access to RDP from the LAN ip
range (192.168.1.0/255) and also my IP address 1.2.3.4

Is this at all possible with out thirdparty firewalls etc?

Thanks.

 

[Robert L [MS-MVP]]

You may want to use Windows NAT. If this is the case, you need two NICs.

NAT and Firewall
In the Select Routing Protocol dialog box, click NAT/Firewall, and then click OK.
.... NAT/Firewall blocks the client accessing the Internet. ...
www.chicagotech.net/nat.htm

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
I have a Windows 2003 sat on the LAN. On the LAN is a ADSL modem router
conencted to the internet.

The Modem/Router does not support IP Filtering so I am left trying to
get the Windows 2003 Server to do so.

What I require is this:

From my home internet connection IP address (for example) 1.2.3.4

Remote Desktop to the Server at 4.3.2.1

I have port forwarded 3389 from the modem/router to the servers IP
address, and everything is connecting fine, every one on the net
literally.

How can I tell Windows 2003 to only allow access to RDP from the LAN ip
range (192.168.1.0/255) and also my IP address 1.2.3.4

Is this at all possible with out thirdparty firewalls etc?

Thanks.

 

[Jeff]

Hi,

The following may also be of use:

Securing Windows 2000 Communications with IP Security Filters, Part 1
http://online.securityfocus.com/infocus/1559

and

Securing Windows 2000 Communications with IP Security Filters, Part 2
http://online.securityfocus.com/infocus/1566

I found the articles to be a big help.

Also, if you are printing (using TCP/IP ports on the local machine),
upgrade to RDP 5.2 (5.1 does not properly install the TCP/IP printer).
http://www.microsoft.com/downloads/...B5-97FF-47BC-BACC-92283B52B310&displaylang=en

Jeff