I have multiple IPs assigned to external NIC of my ISA 2k4 box. I want to be able to 'use' one of these IPs for a machine on my LAN that is running applications with non-standard ports (games etc). Now, can I somehow have 'all traffic' directed through to this by way of one of the spare IPs? How would I achieve this?
Alternatively, is there some rule I can set up that would allow 'all traffic' through to a specific machine on my LAN. I've been trying to get multiplayer games etc working from behind ISA for weeks and have just about given up.
If you guy's can suggest some alternatives, that would be greatly appreciated! Maybe I should be using some kind of DMZ config, or is it better to create a new rule/listener for the public ip I want to use and set it as Route instead of NAT...would this work?
Please, can someone help me with this?
Thanks a lot
< Message edited by ras2a -- 3.Oct.2006 11:45:13 AM >
What I've done for now (quick workaround) is to assign one my spare public IPs to the NIC of my game server and specify the gateway to be my ADSL router (as opposed to ISA). This totally bypasses ISA and makes this partiicular machine wide open to attack, so, I've installed and enabled Zone Alarm (for now)...I'm gonna then forward necessary ports for whatever apps I require.
I haven't tested this out fully yet, but the public IP I assigned is fully pingable from external networks. This is only a temporary measure and I wouldn't dream of leaving the machine 'completely' exposed for long periods (The machine is a gaming rig and seldom turned on) whereas my other machines/servers are on 24/7.
Again, this is a crappy workaround until I decipher just how to get multiplayer gaming behind ISA, working!
Even though you can have multiple listeners on a single IP number, they all must use different ports except web listeners.
However, I don't understand why ISA doesn't prevent Someone from creating a rule that conflicts with another rule with the same listener. You will have to check the event viewer for the reason why your new rule is not working.