Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
not only will you need ports 137 138 and 139 opened between your internal network and the DMZ, but you must permit broadcasts with a helper address for each hop in between your server and the client request. Hope this helps!
Do you have any protection what so ever? I would advise that you look into picking up a generic dsl/cable modem router and refuse to forward any ports internal. Next, if possible; build a BSD, or Linux IP filtering NAT/FW device. You can combine all ...
Remember that you can control the flow of traffic in both directions. So specify the two devices explicitly in any access-list, or statis nat config with the designated port/service specified. To garner the most out of the configuration, consideratio...