1

Restrict Outbound Connections of a Windows Server 2008 NAT Router

view story
linux-howto

http://serverfault.com – I am setting up a Windows Server 2008 R2 lab environment in VMWare workstation and attempting where possible to use Windows Server 2008 R2 to implement machines that serve specific roles within that environment. Using the "Network Policy and Access Services" role I have been able to setup a machine that can server as a NAT router. The issue is that any and all connections are allowed outbound. Is there a way to restrict what outbound connections are allowed? (HowTos)

taskli's picture
Submitted by taskli on 12/18/2012

Stories similar to Restrict Outbound Connections of a Windows Server 2008 NAT Router

A company which our agency works for got a Windows Server 2008. I've had the job to install an FTP-Server (FileZilla Server) on this Windows Server 2008.

Now my problem is that the server does not accept most of the connections. VPN-Connections to this server work [even from outside], but ftp from outside the local network does not work.

I've also written a little tool to test which connections

We have CentOS 6 configured with SELinux to host a number of websites.

I'm having a problem that seems to plague a lot of people judging from my research on the web. I have a hosting provider that limits the number of incoming connections to the shared host to 50 per IP.

I have a single IP for outbound connections and I use Squid as a proxy server.

RDP over SSH Tunnel 31 weeks 1 day ago

Hi all, I'm trying have an alternative way of connecting into a Corporate network.

Summary: how do I create an RDC connection from a Windows 2008 server to another server?

Our client will only allow us to connect to their server via a static IP address (which is fair enough), but unfortunately as we're a very small company we don't have one in the office.

As a work around, we had the connection working through our old Windows 2003 server (dynamic-cloud from 1and1). ..

I recently had a spamming incident, got lsited on a blacklist. I have rectified the issue, removed from the blacklist, but my ip reputation is now classified as a high volume sender.

What is the best way to rectify this? I have an additional ip address.

Hello serverFault-community!

During the last few days I have been setting up a Windows Server 2008 R2 in a VMware. I installed the standard FTP-Server on it by using the Webserver (IIS)-role. Everything works fine with accessing my FTP-Site with ftp://localhost in Firefox. I can also get access to it via the local IP of my Server. Actually everything works fine in my LAN.

I has a very simple task. I need to block access to removable media (CD, DVD, floppy, USB drives etc.) on a Windows 2008 R2 Terminal Server for users and allow it for admins.

I tried to enable the following policy in GPO:

User Configuration/Administrative Templates/System/Removable Storage Access

All Removable Storage classes: Deny all access = Enabled

But it did not work.

We've a Windows Server 2008 host on VMware ESXi 4 and want to isolate it from the rest of the network. That is, I want no traffic from the Windows Server 2008 to be allowed on the normal network.