I have broadband, a router and a switch at the moment but was wondering how I would allow a connection directly to a server (read this as a capable PC) through my braodband connection?

Do I have to have the PC itself receiving the connection via an internal modem of some description?

Cheers for any help.

Wayne.

 

Your router will just need to forward everything to an IP address on the inside, perhaps on a port-by-port basis. This is called NAT, destination NAT to be exact.

 

What about using PAT?


Anyway what kind of server do you want to run?

If a web box then you need to open up port 80 and point it at a web server that has been hardened.. and I dont mean Personal Web server on windows xp..

You can also use a dynamic dns provider to deal with resolving your domain name to your non static ip address.

David

 

PAT is DNAT but with more than one host on the inside.

 

Thought it was probably similar, but did expect to get shot down in flames by yourself!! Suppose I should stick to windows

 

Aww, I never flame

There are lots of terms for what is essentially exactly the same thing;

NAT, SNAT, DNAT, IP masquerading, PAT, even "Internet Connection Sharing", all use the same principle of rewriting source/destination IP addresses.

 

Do you 2 want to get a room? Lol

I want to be able to access this server as a file server only. Its simply to share files with family and friends. I want them to be able to log in via a username and password and simply download from my server.

So do I need a dedicated IP address just for the server? I have one IP address at the moment but have another 7 free to use.

Also what OS is the best to use to do this?

 

you want a chrooted ftp server.

just need to port forward 20/21 to the inside box, preferably firewalling the source addresses in, and dropping any other attempts.


One of the linux flavours would be ideal for something like this , on a scrap/obsolete machine

 

whats chroot? without googling

 

You really DO NOT want to use M$ FTP as it's a right ******* to setup if both parties are behind a firewall.

Fedora Project, sponsored by Red Hat

You should have fun playing with this.

 

Really??

Why's that? I've never had a problem.

David

 

unless something has changed recently, doesn't MS firewall require port 21 & lots of ports in a massive range to be open if the clients are connecting in passive mode?

 

and a quick google yealds fix
Configuring Windows 2003 Firewall and IIS 6 for pasv ftp port range. « Clint Modien - Esria Inc.

and
How the FTP protocol Challenges Firewall Security

 

FTP is a horrible protocol, if you just want people to be able to download stuff you're better off with a webserver instead, only need FTP if you want people to be able to upload as well.

 

If thats the case, then a webserver looks about right.

So where do I start?

Can someone tell me how the hardware is connected and then what software I need to be running?

Any good books on this?

 

Depends how adventures you are.

I recommend you do this on another PC rather than your own - which ever way you choose to do it.

M$ route: - Get hold of Win 2000 proff or WinXP proff and install IIS

*nix route - download Fedora (link above) install, set up web server (it's not that hard honest).

- connect it to your router (or if you use a USB modem, buy a cheap hub to connect your PC's. set up the networking & port forward TCP port 80 to your web-server.


Honestly, for the sake of sharing a few files, why don't you just pay and let someone else host them for you. It'll cost you £20 per year + domain tops.

I resommend:

UK budget hosting - low cost uk web hosting with excellent support

1&1 Internet Ltd.

 

Ok, the PC is running win2k Pro, but not server. Whats IIS?

So after I setup my port forwarding how will other people access it? by IP address?

If so then do I need a staic IP just for this server?

 

DIYwebserver - build and run your own webserver from home dsl broadband connection using windows, apache, IIS, FTP, email server and more

 

Not wanting be funny wayne, but if you don't have any knowledge of this stuff then Bill is right, get some cheap hosting somewhere and don't have any of this hassle.

If you are doing this to try and learn about it then fair play to you, IIS is the webserver that is shipped with XP Pro. Setting up FTP users etc is IMHO not that intuative and for someone with little experience could take a while and will be frustrating. (Obviously all the experts on here will disagree and say how easy it is but you may find things that simply don't work how you think they should! - This coming from a programmer of 15+ years (not age) but a Mac user...)

 

Doesn't IIS running on XP Pro or W2k have limitations, (I have a vague recollection that it limits the number of concurrent connections to 5). I think if you want the full capabilities you have to run a server os.

If you know how to use windows properly then setting up IIS / ftp accounts is in theory very straightforward (it's all done through the administrative tools), but it can be a nightmare to sort out if it doesn't work properly. I'd be tempted to use a hosting service as well. It's also likely to be cheaper (when you factor in the electricity costs of keeping a pc running in the house 24/7).

 

if your nut running w2k server then yeah its limited, however why would anyone install windows 2000 in this day and age..

Start with 2k3, if dedicated ftp server you could use web edition, but std edition will suffice if hardened.

As for passive Ftp, passive ftp on any platform requires a port range to be open afaik.

Anyway dont use passive, problem solved.

David

 

This is spot on mate. Thanks for the link.

I appreciate the concerns over me staring this, but I'm loving the challenge and its only for something to do until summer.

 

Well Oiled,

Keep us informed as to how you are getting on. I too want to do this for the challenge and learning.

Intend to start over the Xmas break when I can put aside some time to get my head round this. Got an old PC that will come in handy with a Linux install, methinks.

WB

 

Will do mate!

 

Not too bothered about the speed. Its just makes it easy for 3 of us to share our stuff and store everything on my 1TB SAN.

Anyway, done it!!

How easy? My word!. Add IIS to Win2k Pro, setup the ftp and configure the settings (childs play), configure port forwarding on my firewall/router with 3 individual custom services (so as to lock down to a single IP address) and then setup 3 user accounts for access to the FTP server.

It couldnt be made any easier.

Thanks for the help guys!!

Oh, and I have to admit to spending an entire shift reading microsoft books at work on Sunday!!

 

Well done mate. Like i said, very interested in this for the learning. Will start next week when I'm on my hols.

Incidentally what make/configuration of NAS are you using?

Cheers

WB

 

Ive got one of those SC101 netgear units. Probably not the best, but cheap.

 

Ah, ok. I was wanting one of these but the news from various forums wasn't good so I stepped aside. Great pity as I think the concept is a good one and is just what I need.

Got a fair few hard drives lying around that could have been knocked back into play. I'm still on the hunt for something suitable (job for a server then?)

Back on topic, I will be setting up my server next week using Ubuntu. Will keep you in the loop.

Cheers

WB