Hi, I am trying to share an internet connection with a Windows 2000 advanced server, and a Windows 2003 Standard Server. The current setup works to a degree. I have 2 NIC cards in the win2k server box. One is setup to be it's internet connection on a 10.4.20.x address segment. This is visible to the firewall and other internally networked machines. The other NIC is on a 192.168.0.x segment. This NIC has a Cross over connection to the Win 2003 server. The Win2k3 server has internet conectivity outbound. I want to setup IP forwarding to the Win2k3 server from other machines on the internal network for file sharing and remote desktop from the internet. So this is the flowchart i want to configure: Internet > Firewall > Windows 2000 server > Windows 2003 Server. Any clues on how to do this? Thanks 4 ur tyme! Matt|ttaM

i'm not really understand what you want.i think,you may use win2k as your internet gateway,then win 2003 as your domain controller.or win2k as primary domain,an other server as secondary

I want to setup NAT (Network Address Translation) on the Win2k ADV Server. So win2k will take packets going to port :3389 from NIC1 on internal IP 10.4.20.2 and translate that into NIC2 on internal IP 192.168.0.4 using a Cross over CAT5 to connect NIC1 and NIC2. Then I should be able to port forward that into the firewall. so that I can use remote desktop from any client machine on the Internet and have it connect to the Win2k3. ISP >> XXX.XXX.XXX.XXX:3389 >> Firewall NAT >> 10.4.20.2:3389 on NIC1 >> Win2k srv NAT >> 192.168.0.4:3389 on NIC2 I have started using Routing and Remote Access in Win2k adv srv. I have created a static route, using the following information: Interface: 10.4.20.2 Destination: 192.168.0.4 Network mask: 255.255.255.254 ** Gateway: 192.168.0.1 Metric: 3389 ** ** = I am not sure if these are right. The problem I see now is that it won't let me change the Network mast to 255.255.255.0. That is the mask I have on both NIC1 and NIC2. The message I get is: THE NETWORK MASK IS INVALID. THE DESTINATION ADDRESS CANNOT BE MORE SPECIFIC THEN THE NETWORK MASK. Anyone have any ideals? I am sure some people are wondering why I am doing all this, I believe this would add a security level to the Wink2k3 box but limiting access to it. Matt|ttaM

I know someone has ideas suggestions or even slander on this topic! Matt|ttaM

Matt|ttaM I've another problem i think similar to this... actully i want to share internet connection b/w 2 computers. Say Computer 1 has two Lan cards LAN 1 and LAN 2. LAN 1 is conneted to main LAN(Hub/Switch) and LAN 2 is connected to crossover cable. currently i am using internet connection sharing(ICS) with DHCP setting. now problem is i don't want to change setting of peer computer that is connected through cross over cable. i am writing a progam that automatically set ip ,subnet mask and default gateway to my LAN 2 card on Computer 1. now i set IP and subnet mask to my LAN 2 but no gateway and for internet access we need to set up gateway as well. so do you have any solution regarding this or do you know how to access gateway of other machine without telling the other machine and also i don't have any access rights. Can you help me ? Waiting for your reply Thanks and Regards Adnan