Next Steps.: Port Forwarding
Next Steps.: Port Forwarding
Congratulations! Youve successfully set up Mac OS X Server, the worlds easiest-to-use server operating system, and youre now ready to use many of the exciting services that it has to offer. To enhance the security, accessibility, and overall usefulness of your new server, there are a few additional changes you should make to your network, and this document will help you get started. These items may require changes to components of your network such as routers and other servers. If you dont have access to these components, contact the person whos responsible for them.
Port Forwarding
Your server is connected to the Internet through a NAT device, such as a network router, which may prevent some users who are outside your immediate network from accessing services. If you dont want to provide access to users outside your immediate network, you can skip this step. To allow access to all users, including those outside your immediate network, you need to configure port forwarding on your NAT device. To do this, use your devices configuration software, which usually consists of several webpages at an address such as http://192.168.1.1 or http://192.168.1.254. Using Safari, you go to the configuration website, and then navigate to the webpage with settings for Port Range Forwarding, Port Mapping, Firewall Settings, or Virtual Server. In some cases, you can select standard services such as web or VPN and specify that each be forwarded to your servers IP address. In other cases, you must enter port numbers for services and enter your servers IP address for each one. For specific information about configuring your NAT device, see its documentation. The ports to forward for many of your services are listed below. Some NAT devices may ask you to specify TCP or UDP for each port, while other devices dont. For a list of ports for additional services, search Server Admin help for TCP and UDP port reference, or see http://support.apple.com/kb/TS1629 Description Apple File Service (AFP) ARD - Remote Management HTTP - web service HTTP - web service alternate HTTPS - secure web service via SSL SMB/CIFS - Windows file service SSH - Secure Shell 548 3283, 5900 80 8080 443 161 22 Ports TCP TCP, UDP TCP TCP TCP TCP TCP, UDP Protocols
Configure DNS
The domain name servers youre using dont have an entry for the name firstserver.ajishra.com, and therefore your clients wont be able to access your server using this name. If your organization has its own DNS servers, ask your IT department to add a DNS entry for firstserver.ajishra.com that resolves to the address your server. If your organization doesnt have its own DNS servers, add this entry through your ISP or with the public domain name registrar where your domain is registered. If your server only needs to be accessed by clients on the your local network (IP subnet), your server can provide the necessary domain name resolution. In order for your clients to use your server for name resolution, you need to configure your servers DNS service to provide DNS forwarding, and then configure your DHCP server (usually your network router) to provide your server address (192.168.1.107) as the primary DNS server. To configure DNS forwarding, make a note of the DNS servers that are currently being used by your router or DHCP server. Open Server Admin, connect to your server, select DNS service, click Settings, and then add those DNS servers to the Forwarder IP Addresses list. For information about how to change the DNS servers that your router or DHCP server provides to clients, see the manual for your device.