Network setup

[ArBiTaL 24]

Some of you may remember this (http://www.ocforums.com/vb/vb/showthread.php?s=&threadid=267149) thread i posted a little while back.
Well, my router has just come through, i'm still waiting on a lil computer i just ordered for the server (my current one couldn't install the server software).
I've also just e-mailed my ISP asking for the Host name, Domain name, and DNS address (things you need to know for setup of the router, apparently)

Here's an image of my network at the moment:
http://homepage.ntlworld.com/arbital24/mynet.jpg

What i have available at the moment is:

1x Router/switch (1 RJ-45 port for the internet (cable modem), 4 for computers, one parallel)
1x 10M patch cable to go from the unconnected PC to the router
1x 3m (ish) patch cable that came with the router
1x rig running the server OS (consider this bought now)

What i need to know is, what configuration should i have the network in? Something like this:

http://homepage.ntlworld.com/arbital24/mynewnet.JPG

Or like this:

http://homepage.ntlworld.com/arbital24/mynewnet2.JPG

I'm really a n00b at this stuff :D
Thanks! :)

[hkgonra]

First off, every router I have ever setup automatically got all the info it needed from my isp. So I am a little lost why you are having to ask them for it.

Are you going to host a website off your server ? If not then you can use the first picture. Also if you are webhosting and your firewall has DMZ option then you should use the first picture as well.

[nebben]

What are you going to be serving on that server?

-ben

[DDR-PIII]

Originally posted by hkgonra
First off, every router I have ever setup automatically got all the info it needed from my isp. So I am a little lost why you are having to ask them for it.

Are you going to host a website off your server ? If not then you can use the first picture. Also if you are webhosting and your firewall has DMZ option then you should use the first picture as well.


Yeah same here it got everything it needed:)

DMZ = very handy :)

[su root]

Use this (http://homepage.ntlworld.com/arbital24/mynewnet.JPG) layout, and use forwarded ports (or DMZ) to the server to provide internet services. That way, the server is behind the firewall.

The only reason to do it the 2nd way you mentioned is when you have a game server, like half-life, which isn't too smart, and needs an external IP.

[ArBiTaL 24]

Yea, it says on the box "Exposed host" (DMZ) support. And yes, I would like to host a webserver for my pages :)

I don't have a static IP though, and I can't get one. My domain name is just a re-direct, so how do i get it to always point to my IP when it changes?

(Oh, "DMZ".. that's de-militarised zone yea? I think i've heard of it before... it that like a proxy?)

[su root]

Depending on your domain, it may be possible to run with a dynamic IP. if it's a no-ip.com redirect, then it's easy to set up a client and have the client update the IP. If it's a real domain, you'll have to check with your Nameserver provider. I use zoneedit.com as my DNS provider, and they allow dynamic updates.

A normal router/firewall works by dropping any packets that weren't requested, or don't have a port map in the portmap table. With a DMZ host enabled, it sends all packets that it would drop to the DMZ host (and is insecure because attacks actually get to the DMZ host). It's better to just use port maps for each application you need mapped. (ie. port 80 for a webserver)

[ArBiTaL 24]

I got my domain from 1&1, it's just their register only package (no hosting). I guess i could get no-ip assigned to my system and link my proper domain to my no-ip, and with masking the person who's browsing wouldn't know any differant, right? Or is there a better way of doing it?
Hmmm, i'll e-mail 1&1 and ask if they can re-direct to dynamic IPs..

[The_Last_Don]

I would definitely put the server behind the firewall (by connecting it to the router) and port forward anything that needs to go to the server (80 for webserver). Even if your hosting a game server, such as half-life, I'd still keep in behind the firewall and forward the ports required for the game.

I know this works for most games servers including cs, bf1942, cod, etc. It's just a matter of opening (i.e. forwarding) the ports necessary for that particular game.

[su root]

If you bought the domain from 1&1, then they will control your DNS servers. It would be a waste if you used a no-ip address instead.

If 1&1 doesn't provide dynamic DNS updating, look into moving your nameservers to another place, like zoneedit.com

Here's more info:
http://zoneedit.com/doc/dynamic.html

[ArBiTaL 24]

So Zoneedit is just like No-ip... Is there a catch? (reading through documentation)

[su root]

Originally posted by ArBiTaL 24
So Zoneedit is just like No-ip... Is there a catch? (reading through documentation)
Not really. You must own your own domain, be able to transfer it anywhere you like, and not go over 200mb of DNS traffic per month (not a problem unless you have a BIG site).

Then any DNS configuration is done through zoneedit instead of 1&1. It's simply a free DNS server, with the ability to do Dynamic DNS.

EDIT: YGPM

[ArBiTaL 24]

Hmmm, sounds good! The only worry is the size limit.. i was hoping to host some vid files about 130megish each :/

[su root]

Originally posted by ArBiTaL 24
Hmmm, sounds good! The only worry is the size limit.. i was hoping to host some vid files about 130megish each :/
You would need to run your own webservers.. the 200mb limit is just for DNS requests

[Cjwinnit]

Originally posted by ArBiTaL 24
Hmmm, sounds good! The only worry is the size limit.. i was hoping to host some vid files about 130megish each :/

I'm hosting an 18Mb video for a forum member on his site and believe me it eats up bandwidth. I hope you don't tell too many people the URL of the 130 meg video ;)