I have configured RRAS on server 2008 R2 named S1. there is a DMZ on the 192.168.1.0 network. 10.10.10.0 is the internal network. the pptp vpn is working fine, routing is working fine. I planned on utilizing IIS on S1 for a web site. Using Hyper-V I created another server named, S2 and configured the Remote Desktop Services feature. We are sharing an applicaion among several users. https://s2/rdweb is displaying a couple of apps and remote desktop connection to a server. this is working fine intnerally on the 10.10.10.0 network. I would like to access https://s2/rdweb publicly. S2 is a virtual server so it has only one configurable IP Address. I can use port forwarding on the external firewall, F1. Currently F1 is configured to forward packets to the external interface on S1. Is there a way to configure windows firewall on S1 where RRAS is to forward those packets to S2? I am unsure how to make https://s2/rdweb available utilzing our public ip address? joe - not a plumber

NO. You cannot re-forward a packet through a second router/firewall. The server will have to be in the same network as the firewall fo use port forwarding to access it from the Internet. The fact that it is a virtual machine does not change the way networking works. You cold not do it with a physical machine on a physical network either.Bill