Adv. Network question...

[nihilist]

I've got a Terminal Server with 2 nics

nic1: 192.168.0.2 - 255.255.255.0
nic2: 192.168.1.1 - 255.255.255.0

192.168.0.x is out main network
192.168.1.x is our network for our thin clients connected via fibre optic

on the main network, our servers are 192.168.0.1-5 ahd DHCP is already running there from .10-200 etc;

I don't want the 196.168.1.x network to see the other hosts except for our few servers .. I don't have a managed switch to do this peroperly yet, and splitting the lan with a Linux box isn't an option for the moment (no time/spare box yet)

I was thinking of setting the subnet on the Terminal Server to 255.255.255.240 which would allow the TS to have access to our other servers (192.168.1-14) but not have access to the other lan's users.

is there a better way, or am I shooting myself in the foot here?

The TS needs to be able to see 192.168.0.1-10 or so.

 

[Peon]

Im not the most knowledgeable but this is what I would try. Also it depends are you running Windows Server?

Open RRAS; Routing and Remote Access on the TS.

Goto IP Routing -> General and NIC2 properties.

Here you can create Inbound and Outbound filters. Im sure with a little bit of effort you can filter ports and IPs of clients that you dont want access to.

 

[nihilist]

Yeah, Win2003 Server.. ta for the routing tip.. not too knowledgeable with Windows servers.. prefer linux ones.

*fiddle*

 

[quovadis]

Put in a Linux firewall then - its simpler than changing routing on a NIC that's for sure

 

[ghalied]

make the changes on your router, don't add gateways for the lans you don't want your clients to see.

which thin clients are you running if may ask.