?
Solved

Firewall rules - manage modem on external side?

Posted on 2009-07-10
2
Medium Priority
?
578 Views
Last Modified: 2013-11-22
Hi,

This is my setup:
- internet to modem known as 10.1.1.1
- modem to Astaro Security Gateway PC on NIC known as 10.1.1.2 (external)
- the internal side NIC of the ASG is 10.1.1.3
- my wireless DLink router is working as a switch and is plugged into the ASG and is known as 10.1.1.4
- my SBS 2008 server is 10.1.1.5 and is also the DHCP server

The ASG DNS forwarders are specified as my two ISP DNS servers followed my by SBS box - is that right?

But my question for now is: how do I access my modem (10.1.1.1) from my laptop for config purposes? Is the a packet filter rule I can write, or do I actually have to plug it into the modem?

Thanks,

Warren
0
Comment
Question by:warrenrapson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 8

Accepted Solution

by:
russell124 earned 2000 total points
ID: 24842635
You need to put the modem and external NIC on a different subnet than your internal LAN subnet.  Right now both sides of your firewall are configured to use the 10.1.1.0 Subnet.

Assuming you are using a 255.255.255.0 subnet mask, I would keep the 10.1.1.0 subnet for your internal network, and use a 10.1.2.0 subnet (Or whatever Number you like, as long as it isn't 10.1.1.0) for your DMZ subnet.  Change the modem IP to 10.1.2.1 and your external Astaro interface IP to 10.1.2.2.

Then change the internal Astaro IP to 10.1.1.1 so that it is the default gateway for your internal network.  If you have these subnets properly configured, the routing should be taken care of automatically, and you will be able to access the modem via it's new IP address of 10.1.2.1.

Your DNS settings should be ok, I typically use my windows DNS server as the listed DNS forwarder,  and then set the windows DNS to use the ISP forwarders, just make sure to add a packet filter rule to allow the DNS traffic from the ISP servers to your SBS server.
0
 

Author Comment

by:warrenrapson
ID: 24847629
Mate, that is fantastic!

Those are some of the best instructions i've read. Thank you thank you thank you!!! Exactly what I needed!

I've got more questions re firewalls, ports and DNS - if you like, check this out: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/SBS_Small_Business_Server/Q_24568129.html


Thanks again,

Warren
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PREFACE The purpose of this guide is to provide information to successfully install the MS SQL client tools for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technology…
I recently had to create a utility which aim is to update McAfee's Virusscan and that had to be launched from a command line. I thought I’d share my experience with you. Why is it useful to be able to update an Antivirus from the command line?…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question