rdp 2008 r2 firewall rule issue

[roymorden]

2008r2 behind nat router, port forwarding rdp to server.

I have static ip, again behind nat router.

want to set firewall to only accept rdp from my ip (static public IP of my router)

So i assume that i would put my ip in the lower of the two boxes.

Surprise, it doesn't work.....

So for a gold star and 10 brownie points

Does port forwarding on a NAT router forward or does it handle the communication? (i.e. change the source IP in the packet header)?

or is there another issue here?

 

TIA

 

Roy

Edited May 26, 2012 by roymorden

[m25man]

Your firewall will need to be set to accept connections from your real public IP (of the initiating client)

[roymorden]

That's what I did, put my public IP in the lower section and it doesn't work

[glennda]

It depends what firewall you are using - it may be showing that the session is coming from it rather that the outside world. But depends what firewall your using.

[m25man]

I assume you have tested your RDP works internally first.

If it does, try setting up your IPsec to/from an internal client before you begin looking at the router.

[roymorden]

RDP works internally and externally.(with no restriction on source IP)

Firewall is the one that ships with R2

router is a thompson (similar to o2 and Be)

Site is some distance away so no local access hence the rdp.

Will look at securing with IPSEC.

Thanks for trying