RE: NAT Open port redirection

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 15 Jan 2005 08:31:26 -0800

Internet based games (otherwise known as on-line games) by design are the
exact opposite of what a firewall is.

 

On-line games basically require you to "open" a range of ports to the whole
world.

 

On-line games and security are mutually exclusive.

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: Nick R. Freeman [mailto:nick@xxxxxxxxxxxxxxxx] 
Sent: Saturday, January 15, 2005 6:00 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] NAT Open port redirection

 

http://www.ISAserver.org

Hi Experts

 

Firstly let me say I am new to ISA server, so please exscuse me if the
answers are obvious.

 

I have setup a ISA2004 server in my home testlab. I have a ADSL Router\FW
which NATs from my external IP to a 10.x.x.x address range, this is inturn
connected to the External interface of the ISA server which then NATS to a
192.168.x.x range. obviously the internal 192 subnet is connected to an
internal Interface on the ISA server which is also the default gateway.

 

I used the Edge firewall template I have setup initially rules to allow all
outbound traffic. I have published SSH, SMTP and OWA servers internally
which is working fine (OWA has a few probs with authentication with ssl
though , not using forms based)

 

I have a few internet based games (driven by gamespy) and I cannot see a way
of setting up an equivelent to Nat open port redirection so that return
external traffic knows which host to be redirected too. I tried server
publishing but that open the ports for external access, which is not what I
want,

 

Is there any articles or walk throughs on how to setup gaming on isa2004
server? I thought it might be the FW client config but I have not found any
examples of this.

 

NIck

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: