| |
Many users set up websites, FTP services, and even small email servers on their machines. However, these network services are either firewall or Intranet-based, it can only be used by yourself or users in the same LAN. If you want to share these network services with more people, you can actually use the firewall to publish these services to the Internet. How can you publish them?
Next, we will introduce the "Service Release" function of Windows Firewall for Windows XP, and describe how to release several common services.
Service Release "elements"
Before publishing a service, you must first understand several elements of the service to be published, which helps you understand the Service Release. These factors are "protocols used for Service Publication", "ports used by services", "firewall ing ports", and "Server IP addresses" in sequence ".
Take publishing the IIS service as an example. By default, the IIS service listens to the user's access on TCP port 80, so this "80" is the port used by the IIS service. Of course, this port number can also be customized. For example, if you change it to "8000", you only need to avoid conflict with the port number used by other services.
Secondly, you must correctly understand the protocol used for IIS service publication. It uses the TCP protocol.
Tip: Generally, the "HTTP" Protocol refers to the Protocol required for users to access the IIS website, and the IIS service is published using the TCP protocol, it is different from the "HTTP" protocol.
In addition, you need to clearly know the IP address of the IIS service and the ing port it uses in the Windows Firewall. The ing port can also be "80", but you can also modify it on your own, as long as the ing port is not occupied by other services.
Practice
After learning about the several elements that need to be mastered in service release, we will start to "Try it out ".
1. Web Service Release
Next, I will publish the IIS service in the Intranet to the Internet through the Windows Firewall. The IIS server is located on the Intranet and uses the IP address "192.168.1.5". Before the server is released, only users in the same LAN can access the server. Other users on the Internet cannot access the server. To allow more users to access it, you must publish the IIS service to the Internet.
In the system tray of the gateway server, right-click the network card connected to the public network and select "Change Windows Firewall settings" in the pop-up menu. The "Windows Firewall" dialog box is displayed, switch to the "advanced" tab, select the connection option to connect to the public network in the "network connection settings" box, and click the "Settings" button to bring up the "Advanced Settings" dialog box (figure 1 ), switch to the "service" tab, where you can publish the IIS service.
Figure 1
Common service release options, such as web server and FTP server, have been built in Windows Firewall, but are not enabled. If both the port used by the IIS service and the ing port of the Windows Firewall use the default "80", you can directly enable the built-in "Web Server publishing option" to publish the IIS service. On the service tab, select the "Web Server (HTTP)" option and double-click this option, in the displayed "service settings" dialog box, enter the IP address of the IIS service, such as "192.168.1.5", in the "name or IP address of the computer hosting the service on your network" column ", click "OK" and then click "OK" on the service tab to release the IIS service.
Supplement: If the port used by the IIS service and the ing port of the Windows Firewall are not all "80" by default, we need to create a Service Release option to publish the IIS service. For example, the IIS service uses port 8000 and the Windows Firewall ing port uses port 80 ". On the service tab, click "add" to bring up the "service settings" dialog box (figure 2). In the "service description" column, set a name for the Service Release option, for example, "my web server", enter the IP address of the IIS server in the "name or IP address of the computer hosting the service on your network" column, select the "TCP" option and enter "80" in the "external Port Number of this service" column, that is, the ing port of Windows Firewall, enter "8000" in the "internal port number of this service" column. This is the port number used by the IIS server. Click "OK" to publish the IIS service.
Figure 2
2. FTP service released
Windows Firewall also has built-in FTP server publishing options. If the port used by the FTP service and the ing port of the Windows Firewall are both the default "21", you can directly enable the FTP service release option. The method is the same as that of the IIS service. However, note that the server publishing option does not contain the Server IP address parameter. You need to set it manually. Double-click the "FTP server" option on the service tab, in the "service settings" dialog box, enter the IP address of the FTP server in the "name or IP address of the computer hosting the service on your network" column, and click "OK.
Some users find that after the built-in FTP server option is enabled, they still cannot access the FTP server normally. This is because the user needs to access the FTP server not only using port 21 of the FTP server, you also need to use port 20 to transmit data. You must publish the port to the public network.
Create a Service Release option and publish Port 20 to the public network. On the "service" tab, click "add". The "service settings" dialog box is displayed. In the "service description" column, enter "FTP server-20", and then enter the IP address of the FTP server, select the "TCP" option, enter "20" in the "external Port Number of this service" column, and enter "20" in the "internal port number of this service" column ", click "OK" to release Port 20 of the FTP server.
The preceding section briefly introduces the publishing of Web Services and FTP services. The publishing methods of other services are the same, as long as you understand the several elements of service publishing: the Protocol (TCP or UDP) used for service publishing, the port used by the Service (may have multiple), the firewall ing port (may have multiple), and the server IP address, the service can be successfully released. |
|
