Can I get some help with a server

[EightySix Four]

I need to setup a file server that can be accessed from outside our network, I'm mediocre with servers and ok with networking. The server is behind an old linksys router and I need people from anywhere with net access to be able to connect and access files on it. I need to know three things,

how to set-up the router to allow the connections
how to set-up the server to share the files
how to secure it all (sensitive materials being shared)

The server is runnin Server 2003

 

[nweaver]

allowing internet access to file sharing (i.e. windows rpc) is like going to the wrong side of the tracks, crossdressing, with a sandwitch board that offends the local crowd. you are bound to get killed.

Have you considered FTP? (not that FTP is secure). IIS6 is SUPPOSED to be fairly robust.

Other option would be VPN, that would probably be ideal.

 

[EightySix Four]

Well, can't do FTP, as the software would be pretty pissy about it, can you answer my original questions in relation to a VPN?

 

[nweaver]

Not sure on Linksys VPN...I have only setup to linux boxes making an IPSEC tunnel through the internet (and that was forever ago).

As for #2, same as a lan client

As for #3, same as a lan client.


A VPN client should get a local ip, and be able to work just like it is local. Setup normal filesharing, and as for security, best practices say to set the permissions on the share tab of the folder to full access for everyone, and then limit users via the "security" tab. Remember that "Deny" takes precedence over "allow", so if a user group is allowed, a single user from that user group can be denied, and the deny permissions will keep them out, regardless of any other permissions.

 

[EightySix Four]

How do I have external computers connect to the VPN?

 

[EightySix Four]

This server box only has 1 lan port, connected to the router, which is connected to the net, how does the server get the connections from outside the network through the router, and then act as a VPN server from within the network?