|
Posted by Simon on June 8, 2006, 8:51 am
If you were Registered and logged in, you could reply and use other advanced thread options Rob S wrote:
>
> -Most port forwarding setups forward the ports you setup from the wan
> -port (internet) to the lan address of the PC that you specify. I'm not
> -sure I have seen ones that would allow you to tie this down to a
> -specific wan address, those that do would also most likely support a vpn
> -as well.
>
> Take a look at: http://kbserver.netgear.com/pdf/dg834gt_manual.pdf
>
> it's a 3Mb file though. P73 shows WAN users - in this case a range but can just
> as easily be 1 IP.
>
> As this is tied down to 1 specific IP address, which the person knows is
> trusted, I don't see how it can be insecure, unless the router firewall doesn't
> work like it says it does.
>
> That being the case, presumably I'd have to open up lots of ports to handle MS
> networking, I just don't know which ones!
>
> Any ideas?
>
> thanks
>
>
> -Rob
> robatwork at mail dot com
135 -> 139 and 444 if you really want to. It makes me uneasy though.
XP Pro supports one incoming VPN connection, if you are running this
then I would use this method. 99% of all broadband routers out there can
support the inbound forwarding of tcp 1723 and GRE quite often just
bundled as PPTP that would make this a more secure solution, and you
could get away with dynamic addresses if the routers support dynamic dns
(most do)
simon
|