Printable View
I have a windows server 2003 machine behind a firewall. The outside firewall
has port 1000 forwarded to port 1000 on my windows server machine. I would
like to forward everything that comes through on port 1000 on my windows
server machine to port 3000 on another machine that is on the internal
network somewhere. How do I do this?
The question is, can the firewall you have, do this?
Forward from eksample "146.245.3.2" outside, to "192.168.0.255" inside. And
from 1000 to 3000.
Technically there is no such thing as "port forwarding". That is a term
"invented" by the Home User Market with respect to their "broadband routers"
(which are not really "routers" either). Ports are Layer4 and they are just
"addresses",...they are not routable addresses, therefore they cannnot be
"forwarded" which is a Layer3 routing term. The actual action occurs
primarily at Layer3 (the IP#) not at Layer4 (Ports). So you could logically
call it IP Forwarding, except for the fact that the term "IP Forwarding" has
already been established to mean normal regular IP Routing (hence my comment
about "forwarding" = "routing" and can't apply to non-routable Layer4
addresses)
The technically accurate term would be Reverse NAT or Static NAT when the
port number stays the same on both sides. If the port number changes that is
called Port Addess Translation which can run over the top of (combined with)
the Reverse NAT,...so then that gives you Reverse NAT with Port Address
Translation (RNAT/PAT)
Example:
external internal
RNAT = 23.234.12.31:1000 -->192.168.1.5:1000
RNAT/PAT = 23.234.12.31:1000 -->192.168.1.5:1532
In RRAS it is found in the section of the RRAS MMC called, I believe,
Services.
Hi, the firewall is already forwarding port 1000 to my windows machine. I
have the ability to change settings on the windows server machine so I just
need to know how to forward port 1000 on my windows machine to port 3000 on a
machine somewhere else.
You don't.
You go from the Firewall directly to the machien it is supposed to go to on
the port it is supposed to go on.
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
Unfortunately I dont have access to the firewall. I just have the one port
forwarded through.
You have to have access to the firewall.
OMG, I can not believe you got this much run around for such a simple question. YES this can be done Router<--->Server<---->Network. It is done everyday. No you do not need access to the firewall. because the port is already forwarded there. Windows server 2003 is acting as the router in this case or a bridge between his ISP box and his network.
ANSWER:
Administrative Tools >
Routing and Remote Access >
ServerName >
IP Routing > NAT/Basic Firewall >
Right-Click on your NIC-1 LAN >
Properties >
Services & Ports Tab >
Add... >
Enter Incoming Outgoing Port and IP of the workstation
Cut the crap and get to the point. I wish everybody would answer like you.
Simply visit http://support.microsoft.com/kb/555744
example gateways port 3000 -> 192.168.0.255:1000
work on gateway pc
c:\>netsh
netsh>interface portproxy
netsh interface portproxy>add v4tov4 listenport=3000 connectaddress=146.245.3.2 connectport=1000 protocol=tcp