Partilhar via


Configure Basic Firewall for a public interface

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To configure Basic Firewall

  1. Open Routing and Remote Access.

  2. In the console tree, click NAT/Basic Firewall.

    Where?

    • Routing and Remote Access/ServerName/IP Routing/NAT/Basic Firewall
  3. In the details pane, right-click the interface you want to configure, and then click Properties.

  4. On the NAT/Basic Firewall tab, do one of the following:

    • Click Public interface connected to the Internet, and select the Enable a basic firewall on this interface check box.

    • Click Basic firewall only.

Notes

  • To perform this procedure, you must be a member of the Administrators group. As a security best practice, consider using the Run As command rather than logging on with administrative credentials. If you have logged on with administrative credentials, you can also open Routing and Remote Access by clicking Start, clicking Control Panel, double-clicking Administrative Tools, and then double-clicking Routing and Remote Access. For more information, see Default local groups, Default groups, and Using Run as.

  • You cannot enable Internet Connection Firewall (ICF) or Windows Firewall on a server running Routing and Remote Access.

  • You can allow or prevent certain types of network traffic from reaching your network by configuring additional static packet filters. You can also accept or deny certain types of Internet Control Message Protocol (ICMP) messages, traffic required for particular services, or traffic that travels through particular ports.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Working with MMC console files
Basic Firewall
Configure services and ports
Allow or deny ICMP messages
Internet Control Message Protocol (ICMP)