Re: SBS2003 Premium DNS Issue

From: SMC (mmcelrath_at_earthlink.net)
Date: 11/29/04 

Date: Sun, 28 Nov 2004 19:09:11 -0600

Based on what I have seen in this newsgroup, my understanding is that you do
not want a website hosted inside the internal network for security reasons.

Perhaps the security issue is hosting on the SBS server, not inside the
network. I would like clarification on this.

tracert shows test.mycompany.com going directly to the web server (both
192.168.200.100). Adding http://test.mycompany.com sends the trace directly
to the DSL router out to the internet.

I have temporary work around in place. Using VPN, I transfer files from the
SBS server to the web server and then use FrontPage, installed on the web
server, to publish the site. A lot of extra steps, but is does work.

Thanks,

MikeMc

"Jim Behning SBS MVP" <jimbehingmvp@mindspring.com> wrote in message
news:q5h1eu472fgckl5t481n28ma6ft4a3i6c7@4ax.com...
>I just hung the webserver inside the internal network and published
> using server publishing rules in ISA
>
> Does tracert work from a workstation?.
>
> "SMC" <mmcelrath@earthlink.net> wrote:
>
>>SBS2003 Premium DNS Issue
>>
>>
>>
>>I have an SBS2003 Premium sever with 2 network cards (192.168.16.2 and
>>192.168.200.1). From my ISP I have a DSL Router (192.168.200.254) and a
>>Firewall w/ DMZ (192.168.200.2).
>>
>>
>>
>>My company has a web site hosted on the outside (mycompany.com). For a
>>short
>>time I hosted a test web site from the SBS server by making it a sub
>>domain
>>(test.mycompany.com; I added an 'A' record at the web hosting company).
>>This
>>worked ok and I could update the test web site, located on the SBS server,
>>from a workstation inside the network.
>>
>>
>>
>>Now I have a Windows 2003 web server (192.168.200.100) on the DMZ port of
>>the firewall. I'm using host headers for the web site. From the outside I
>>can view the test wed site and make changes with FrontPage 2003 via a
>>laptop
>>and a dialup connection.
>>
>>
>>
>>>From a workstation inside the network, I can only get to the router
>>(192.168.200.254) when I type http://test.mycompany.com. I suspect that my
>>workstation inside the network is getting my fixed IP from the web hosting
>>company when it sees the test.mycompany.com 'A' record and is now taking a
>>short cut directly to the router.
>>
>>
>>
>>I can ping 192.168.200.100 (the Windows 2003 web server) and I have even
>>setup a VPN from the web server to the SBS (FrontPage won't update a
>>SharePoint/FrontPage extended site by file transfer!). In IE, if I type
>>192.168.200.100 I get a 403 error and in Firefox I get the default web
>>site
>>hosted on the Windows 2003 web server.
>>
>>
>>
>>I have worked with the DNS and ISA settings on the SBS and have not come
>>up
>>with a solution yet. I want the security of having the web site hosted
>>outside of the SBS. Perhaps someone with more DNS/ISA knowledge can help?
>>
>>
>>
>>MikeMc
>>
>>
>>
>
> Jim B. SBS Community Member
> remove the mvp to send email

Relevant Pages

  • Re: Companyweb and Hosted Website?
    ... is matched with you SBS server name. ... Go to Default Web Site, right click Properties to open Properties page. ... Then please run command "IISreset" to restart the IIS ... To collect the IIS metabse on the SBS server box, ...
    (microsoft.public.windows.server.sbs)
  • Re: ConnectComputer Vista to SBS 2003 fails
    ... If you use a public proxy server to browse the Intrernet, ... Default web site is not listening on "All Unassigned" for port 80. ... Run CEICW to re-configure the network and firewall on the SBS server. ... Add the ConnectComputer server's IP address or FQDN to the Local Intranet ...
    (microsoft.public.windows.server.sbs)
  • Re: Getting internal domain noticed to the outside world
    ... which point your FQDN to the IP address of your SBS server first. ... Hosting a Business Card Web Site ... I assume you have already registered an internet Domain name. ...
    (microsoft.public.windows.server.sbs)
  • Re: Network Topology
    ... > server that provides this service, and I can open the port on the firewall ... inside of your network. ... provides a back to back DMZ for you. ... PIX hand out DHCP addresses won't matter, since the SBS server will be doing ...
    (microsoft.public.windows.server.sbs)
  • Re: Theft of WiFi charge in Florida
    ... >> implicitly given permission to connect. ... >> To access the web site you must use their network. ... And how do you think you get to the server? ...
    (comp.sys.mac.comm)