How to Setup Static IP Passthrough on ATT Uverse

Problem: You are changing from DSL or other internet service to use Uverse for your business. You need to have an external facing IP address for email, website, remote access or other traffic.

Solution: First you should have an external facing firewall.  Second when you purchase your Uverse account make sure you specify that you need external Static IP addresses. Third follow the steps below:

Once the ATT installation technician relays to you your IP information including your usable addresses, Modem IP, subnet mask, and DNS information. Setup your externally facing firewall with one of the usable addresses using the new schema settings.

Once your external firewall is ready log onto the ATT Uverse Modem

Note: you will need the Access Code located on the label of the modem

Once on the router select “Firewall” >“IP Passthrough”

Select “Default Server” and enter in the IP address of your externally facing firewall and “Save” as shown below:

clip_image001

You will then be prompted to restart the modem which will take at least 2 minutes

This should open up ALL ports externally coming IN to that external IP address.

Warning: If do not have a firewall in place you have opened the flood gates.

You need to call ATT and have them open port 25 out if you are hosting an exchange or other SMTP email server as port 25 OUT is blocked by default.

Once they say port 25 is open you test by using telnet

Telnet smtp.gmx.com 25

clip_image002

If you see the following SMTP may not be open. Try another domain or smarthost and ask ATT to run their test tool again to confirm 25 is open:

clip_image003

If you see the following connection is made then SMTP out is enabled:

clip_image004

Note: If using McAfee SAAS/MXLogic or other email filtering service you may need to change your inbound and outbound servers to match your new IP schema for EACH domain alias. The quickest way to change domains on McAfee Saas in “Email Protection Setup” for “Inbound Servers” and “Outbound Servers” is to click on the domain name on the right and a dropdown will appear to let you select your other domains.

Comments

Post a Comment

Popular posts from this blog

FRS to DFSR Post Cleanup “File Replication NtFrs Stopped”

Image
After successfully migrating from FRS to DFSR you get the File Replication NtFrs service is Stopped error on the local servers AD DS Services list. In the Event logs you may see Event id 13575 13577. You can confirm your migration completed by opening a cmd prompt as administrator and typing in: dfsrmig /getmigrationstate After your migration to DFSR is completed and you have given your servers ample time to propagate this service is no longer required. Since it is set to “Automatic”, as shown below” it shows in logs as a false positive error. Edit the File Replication Service and change it to “Disabled”, as shown below: Once it is listed as “Disabled” it will no longer show in the Console as an “error” Note : it may take some time to clear from the active view
Read more

Domain Migration SubinACL /Migratetodomain How To:

Caution : DO NOT run this on Domain Controller C:\ and only run on roaming profiles folders, or my docs shares day of migration to avoid ownership change issues. Confirm Domain trust is in place and users and groups have been migrated Test ping of olddomain.org from new domain Test ping of newdomain.org from olddomain Add newdomain.org domain controller host records to olddomain.org including reverse DNS records Confirm the user running the app is a domain admin in BOTH domains Download SubinACL here: http://www.microsoft.com/en-us/download/details.aspx?id=23510 /Migratetodomain- command will add the permissions of the new user to the old files and folders for example if jimbob@olddomain.org was migrated to the new domain jimbob@newdomain.org and you run the command below any file or folder in that path that has jimbob@olddomain.org will add Jimbob@newdomain.org with the exact same permissions. This is a safer way to migrate by keeping the old and new permissions intact while a...
Read more

How to configure HP LaserJet Printer IPsec Encryption

Image
  I always recommend using a static IP for network printers. Once you have that configured use the printers web interface by going to that IP address using internet explorer. Select the” Networking” Tab > “IPsec/Firewall” as shown below: First we will add a rule to allow unencrypted traffic from all connections we will later define IPsec rules specific to the print server. You can set encrypted for all but keep in mind if it fails you will have a harder time remotely repairing it. Select “Add Rules” > “All IP Addresses” as shown below: Select “All Services” >”Next” as shown below: Select “Allow traffic…” >”Next” as shown below: Select “Finish” >”Next” as shown below: Select “OK” as shown below: It should take you back to the ” Networking” Tab > “IPsec/Firewall” as shown below: Note: “Enable IPsec/Firewall” is unchecked Now we will add an Encrypted Rule: Select “Add Rules” > “New” as shown below: Name the Rule, Specify the local and remote IP Addresses ...
Read more