NAT and guest account again

[andyng]

Hi,

I have install Wingate 6.11 on a Windows 2000 Sever SP4. I can seems to figure out the following.

Extended Networking Services firewall I have enable port redirection for pot 25 and port 110 to a mail server behind Wingate. I find that I must enable Guest account for POP and SMTP access from the Net to the mail server. If I disable Guest account or Enable authentication Users from the net cannot access the mail server.

However if I enable the guest account I find that a few PC are able to access the net e.g

IP: 192.168.0.151
NAT: TCP connection to 24.81.247.136:47323

Users info indicated that this is a guest account.

How do I stop these services and yet let the NAT use the guest account for incoming POP and SMTP access.

Thanks.
Andy Ng

[adrien]

Hi Andy

Do you want to provide any sort of NAT to your clients? If not, you can turn it all off by setting to "deny" the default policy for "Lan Connections to the Internet" for TCP on the Port Security tab of the Extended Networking properties in GateKeeper.

Adrien

[andyng]

Hi Andy

Do you want to provide any sort of NAT to your clients? If not, you can turn it all off by setting to "deny" the default policy for "Lan Connections to the Internet" for TCP on the Port Security tab of the Extended Networking properties in GateKeeper.

Adrien

Hi Adrien,

Thanks for your reply. That is a good question :(. What I want is to limit a bunch of users from accessing the net and allow a few users to acccess the web.

Also we have is a mail server that is behind Wingate. So I guest NAT is required for SMTP, POP, Web Mail and AntiVirus update for a few PC like Mail Server and AntiVirus Server.

Is there any other solution that is not so drastic. I will try your suggestion and see what impact would arised.

Thank
Andy Ng.

[adrien]

Transparent proxy will still work if you deny all NAT, so you can still allow restricted web access to your users without having to open up all NAT access.

Regards

Adrien