Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How should I setup a server (Windows Server 2008 R2) such that FTP access is possible over a normal Internet connection, but HTTP access is only possible when connected to the company VPN?

share|improve this question

This is simple, but there are a few ways to go around it. The way I would do it:

If this server is behind a router (but with NAT) and it has the VPN endpoint the other side of the router/same network as the server, you simply need to forward the FTP ports you use from the router to the server, but just don't forward port 80 / the HTTP port you use.

If you want to be a bit more secure and have it only accessible via VPN and not internal network, then use IP restrictions on the HTTP server to only allow access from your VPN DHCP pool / Static reserved addresses.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.