Re: Cant access web on local network server

Meinolf

Yes my Windows 2003 R2 Standard Server is a DC domain controller.

How do I open DNS for the outside?

What port should I give access to?

Do I add it to the exceptions section of the firewall program?

Before you told me to open port 69

is that still what you want ?

I not sure how to open dns for the outside

Please help

Thanks

Tom

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66fcc48cb24c868556184@xxxxxxxxxxxxxxxxxxxxxxx
Hello Thomas,

You need DNS also for outside access, so open DNS port and try again. Is
the server also DC?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Meinolf

Yes in the DNS server I have the forwarders pointing to to dns servers
of my ISP I just checked the settings again

Ok let me explain my network it might help

DSL
Internet LINKSYS Router LINKSYS Switch
XXXXX ---------XXXXXXXXX-------XXXXXXX
| | | |
|
| | | |
|
| | | |
|
XX YY YY SS YY
XX= NAS storage device
YY= Windows XP Pro SP3 workstations (use Windows Live One Care for
antivirus
and Firewall)
SS= Windows 2003 R2 Standard Server (Windows firewall)
subnet is 192.168.10.x
router is 192.168.10.1
DNS is 192.168.10.10
WINS is 192.168.10.10
DHCP is 192.168.10.10
All workstations have DNS pointing to 192.168.10.10 then the
forwarders should work correct? But the firewall is blocking something
PORT 69???

Now what I need is to protect my Windows 2003 server so I want to use
the
Windows Firewall program
I run windows SharePoint 2.0 on the Server
Currently all is working fine my workstations can access the
SharePoint web site as well as external web sites

Problem is when I start the Windows Firewall program on my Windows
2003 server my workstations can no longer access external web sites

I have not tried opening port 69 yet

Should I reconfigure the firewall program My current config is
standard profile I think there is another one but I am not sure how to
change it

I hope thie explains what I am tring to do

Thanks for your help

I really need to protect my server as soon as possible

What do you think I need to set in the windows firewall?

Thanks

Tom

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66fb448cb242758c5eb87@xxxxxxxxxxxxxxxxxxxxxxx

Hello Thomas,

What i meant was why are you using the firewall domain internal. Did
you configure forwarders to your ISP's DNS server on the Forwarders
tab in the DNS management console?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Meinoff

Thank you

Question you asked
I do not know why the reason is that block domain internal all the
ports is
set.
I did not set that, is that a default?
How do I change that?

Open port 69 Both TCP UDP

Any ideas

Thanks again

Tom

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66fb048cb24028f520007@xxxxxxxxxxxxxxxxxxxxxxx

Hello Thomas,

For correct DNS resolution you have also open port 69. What's the
reason to block domain internal all the ports? Basically with a
firewall to the external world you should be fine.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Meinolf

Thanks

Maybe you can help me now that I turned on the firewall again , my
pcs now can access the local web site but can not get out to the
external webs

What setting am i missing now?

When I go into the firewall settings

advanced>> Local area connection>settings>services advanced>>

internet mail server (SMTP)
Secure Web (HTTPS)
Web Server (HTTP)
only these three are checked
ICMP
allow incoming echo request is only one checked
Any ideas
Thanks
Tom

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66f98f8cb2364383fbd9b@xxxxxxxxxxxxxxxxxxxxxxx

Hello Thomas,

Basically the port 80 is for http, sometimes 8080, https uses
port 443. And again please stick to one posting. You will get
answers, it will not be faster if you post the same question
multiple times.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
I just turned on the windows built in firewall on my Windows
2003 R2 Standard server and now my pcs can not access the web
site(Sharepoint2.0) that is running on the server. This is from
my local area network. If I turn off the firewall on the Windows
2003 server then the pc's works.

What settings am I missing I looked all over but do not see what
to open up for the local lan

Any ideas

Thanks

Tom





.

Relevant Pages

  • Re: NT Domain to AD migration
    ... Windows 2000/XP always prefer Kerberos authentication, ... Server 2003 Active Directory service, ensure that you have designed a DNS ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Secondary DNS and PIX
    ... Of course I updated them with the DNS ... WINDOWS SERVER 2003 FOR SMALL BUSINESS SERVER, ... Windows SBS 2003 SP1 is available. ...
    (microsoft.public.windows.server.sbs)
  • Re: Find AD hostname from Linux command line
    ... The Windows XP workstation gets an IP ... "Register this connection's addresses in DNS" turned ON. ... If I am on a Linux server and do "ping lancelot.ad.mydomain.com", ...
    (microsoft.public.win2000.dns)
  • Re: Secondary DNS and PIX
    ... SBS SP1 was a very specific service pack comprising several ... Root hints for DNS means you leave the forwarders ... WINDOWS SERVER 2003 FOR SMALL BUSINESS SERVER, ...
    (microsoft.public.windows.server.sbs)