Re: ISA 2004 & SBS 2003

From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 01/03/05 

Date: Mon, 3 Jan 2005 23:25:54 +0100

Hi Doug,

I assume that ISA 2004 also has a Firewall Client. Did you uninstall that
from the workstations? Did you check the LAN-settings in IE and made sure
the proxy is empty? 

-- 
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Doug" <Doug@discussions.microsoft.com> schreef in bericht
news:32E8E1BD-6344-4DAB-837F-636040D24581@microsoft.com...
> Hi Again Marina,
>
> I am not certain it is related but here's what I think.  Prior to
installing
> ISA 2004 - everything worked correctly.  That particular server doesn't
have
> a hardware firewall, just the basic firewall/NAT on the external
interface.
> NAT is configured through RRAS. Once I uninstalled ISA 2004 and after I
> manually configured RRAS for VPN access and NAT - everything seemed to be
> working correctly.  VPN, RWW, SPS, OWA, etc. were all working and Inernet
> access from the inside was working as well.  But I noticed yesterday that
I
> could not FTP from anywhere inside the network to anywhere outside.  I
could
> actually make the connection and authenticate but most everything would
time
> out after that.  For my sites that support passive FTP, I configured my
FTP
> clients to use passive FTP and it works correctly.  For sites that don't
> suport passive FTP, I have to connect through other networks to put or get
> files.  Passive FTP is usually used to "get around" firewall issues on the
> client side.  This is what is making me think that it may be a
configuration
> issue with NAT.  So, I decided to take your advice and reinstall the
server
> tools hoping that reconfiguring with the wizards would correct whatever
was
> misconfigured.  I disabled RRAS on the server prior to doing this so that
I
> would know the wizards worked again if everything was configured correctly
> after using the wizards.  After all of that, everyhting seems to work just
as
> it did after I manually configured RRAS.
>
> Sorry for the long response, just wanted to try and explain my thinking.
I
> still think it is some sort of NAT/basic firewall issue but can't find
> anything so far.  Since RRAS is where these services are configured, this
is
> where I think the problem may be.
>
> Thanks again - Doug - MCSE, CNE
>
> "Marina Roos [SBS-MVP]" wrote:
>
> > Hi Doug,
> >
> > I don't really see the connection between RRAS and FTP. If you need
RRAS,
> > did you run the RRAS wizard yet?
> >
> > -- 
> > Regards,
> >
> > Marina
> > Microsoft SBS-MVP
> > One of the Magical M&M's
> >
> > "Doug" <Doug@discussions.microsoft.com> schreef in bericht
> > news:FE3D5466-34BA-4E6E-B4F8-3F82FB5CE86F@microsoft.com...
> > > Thanks for the reply Marina.  I went ahead and manually configured the
NAT
> > > mappings so that I could publish owa, RWW, etc.  and it worked fine.
But,
> > as
> > > per your advice, today I disabled RRAS and reinstalled the server
tools to
> > > test.  Once I reinstalled the tools and used the connect to the
Internet
> > > wizard and the remote access wizard, SBS configured everything as it
used
> > to
> > > before I broke it ;)
> > > However, I maintain a couple of websites and since I broke RRAS, I can
> > only
> > > connect with FTP to those hosts if I'm using passive FTP - even after
> > > reinstalling server tools and reconfiguring with the wizards.  I
didn't
> > have
> > > to do this before - any idea what still needs to be adjusted?  Thanks
> > again -
> > > Doug.
> > >
>

Relevant Pages

  • Re: ISA 2004 & SBS 2003
    ... NAT is configured through RRAS. ... This is what is making me think that it may be a configuration ... I decided to take your advice and reinstall the server ... tools hoping that reconfiguring with the wizards would correct whatever was ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2004 & SBS 2003
    ... RRAS wizard. ... The only time I use FTP anymore is to put ... >>> would know the wizards worked again if everything was configured ...
    (microsoft.public.windows.server.sbs)
  • Re: Client End Firewalls
    ... it doesn't matter if the email client can't be tricked when the ... control such things on a Windows 98 box. ... > than getting the client firewall properly configured. ... > additional costs for configuration and configuration-changes? ...
    (Security-Basics)
  • Re: Cant Ping Windows 2003 server after R2 Upgrade..HELP!
    ... UPDATE* -- i've enabled to the windows firewall just to see what can be ... i then adjust the ICMP setting to allow ALL icmp. ... Enable 3 Allow outbound destination unreachable ... ICMP configuration for Local Area Connection 7: ...
    (microsoft.public.win2000.active_directory)
  • Re: R2 in-place upgrade bug ? ..HELP
    ... UPDATE* -- i've enabled to the windows firewall just to see what can be done ... Enable 3 Allow outbound destination unreachable ... Enable 9 Allow inbound router request ... ICMP configuration for Local Area Connection 7: ...
    (microsoft.public.windows.server.active_directory)