Re: ISA 2004 & SBS 2003

From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 01/04/05 

Date: Tue, 4 Jan 2005 01:02:05 +0100

Hi Doug,

Well, undo everything you did manually on the RRAS, disable it and rerun the
RRAS wizard. After that, rerun the CEICW wizard and make sure you do make
some changes in the Firewall part. After that check the RRAS and make sure
you uncheck the HTTP webserver, as that one is always enabled by CEICW when
running CEICW.

Smallbizserver.Net > Network > SBS 2003 Standard with UPnP router:
http://www.smallbizserver.net/Default.aspx?tabid=165

Give the server a reboot for the fun of it and try again. You might want to
try from the server first to see if that works. Than it should work from the
clients too. 

-- 
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Doug" <Doug@discussions.microsoft.com> schreef in bericht
news:91C73AA4-60DE-4F49-A050-ED1530A92F89@microsoft.com...
> Hi Marina,
>
> ISA '04 does have a client but I didn't install it on any of the PCs.  I
did
> check that the proxy settings were as they should be after I uninstalled
ISA
> and they are.  Everything seems to be working correctly with the exception
of
> the active/passive FTP issue.  The only time I use FTP anymore is to put
or
> get website files or I probably wouldn't have even noticed anything.  Any
> other ideas?
>
> Thanks again,
> Doug
>
> "Marina Roos [SBS-MVP]" wrote:
>
> > Hi Doug,
> >
> > I assume that ISA 2004 also has a Firewall Client. Did you uninstall
that
> > from the workstations? Did you check the LAN-settings in IE and made
sure
> > the proxy is empty?
> >
> > -- 
> > Regards,
> >
> > Marina
> > Microsoft SBS-MVP
> > One of the Magical M&M's
> >
> > "Doug" <Doug@discussions.microsoft.com> schreef in bericht
> > news:32E8E1BD-6344-4DAB-837F-636040D24581@microsoft.com...
> > > Hi Again Marina,
> > >
> > > I am not certain it is related but here's what I think.  Prior to
> > installing
> > > ISA 2004 - everything worked correctly.  That particular server
doesn't
> > have
> > > a hardware firewall, just the basic firewall/NAT on the external
> > interface.
> > > NAT is configured through RRAS. Once I uninstalled ISA 2004 and after
I
> > > manually configured RRAS for VPN access and NAT - everything seemed to
be
> > > working correctly.  VPN, RWW, SPS, OWA, etc. were all working and
Inernet
> > > access from the inside was working as well.  But I noticed yesterday
that
> > I
> > > could not FTP from anywhere inside the network to anywhere outside.  I
> > could
> > > actually make the connection and authenticate but most everything
would
> > time
> > > out after that.  For my sites that support passive FTP, I configured
my
> > FTP
> > > clients to use passive FTP and it works correctly.  For sites that
don't
> > > suport passive FTP, I have to connect through other networks to put or
get
> > > files.  Passive FTP is usually used to "get around" firewall issues on
the
> > > client side.  This is what is making me think that it may be a
> > configuration
> > > issue with NAT.  So, I decided to take your advice and reinstall the
> > server
> > > tools hoping that reconfiguring with the wizards would correct
whatever
> > was
> > > misconfigured.  I disabled RRAS on the server prior to doing this so
that
> > I
> > > would know the wizards worked again if everything was configured
correctly
> > > after using the wizards.  After all of that, everyhting seems to work
just
> > as
> > > it did after I manually configured RRAS.
> > >
> > > Sorry for the long response, just wanted to try and explain my
thinking.
> > I
> > > still think it is some sort of NAT/basic firewall issue but can't find
> > > anything so far.  Since RRAS is where these services are configured,
this
> > is
> > > where I think the problem may be.
> > >
> > > Thanks again - Doug - MCSE, CNE
> > >
> > > "Marina Roos [SBS-MVP]" wrote:
> > >
> > > > Hi Doug,
> > > >
> > > > I don't really see the connection between RRAS and FTP. If you need
> > RRAS,
> > > > did you run the RRAS wizard yet?
> > > >
> > > > -- 
> > > > Regards,
> > > >
> > > > Marina
> > > > Microsoft SBS-MVP
> > > > One of the Magical M&M's
> > > >
> > > > "Doug" <Doug@discussions.microsoft.com> schreef in bericht
> > > > news:FE3D5466-34BA-4E6E-B4F8-3F82FB5CE86F@microsoft.com...
> > > > > Thanks for the reply Marina.  I went ahead and manually configured
the
> > NAT
> > > > > mappings so that I could publish owa, RWW, etc.  and it worked
fine.
> > But,
> > > > as
> > > > > per your advice, today I disabled RRAS and reinstalled the server
> > tools to
> > > > > test.  Once I reinstalled the tools and used the connect to the
> > Internet
> > > > > wizard and the remote access wizard, SBS configured everything as
it
> > used
> > > > to
> > > > > before I broke it ;)
> > > > > However, I maintain a couple of websites and since I broke RRAS, I
can
> > > > only
> > > > > connect with FTP to those hosts if I'm using passive FTP - even
after
> > > > > reinstalling server tools and reconfiguring with the wizards.  I
> > didn't
> > > > have
> > > > > to do this before - any idea what still needs to be adjusted?
Thanks
> > > > again -
> > > > > Doug.
> > > > >
> > >
> >
> >
> >

Relevant Pages

  • Re: ISA 2004 & SBS 2003
    ... I assume that ISA 2004 also has a Firewall Client. ... > NAT is configured through RRAS. ... > would know the wizards worked again if everything was configured correctly ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2004 & SBS 2003
    ... NAT is configured through RRAS. ... This is what is making me think that it may be a configuration ... I decided to take your advice and reinstall the server ... tools hoping that reconfiguring with the wizards would correct whatever was ...
    (microsoft.public.windows.server.sbs)
  • Re: Unknown Network Attack
    ... But not routing and remote access (RRAS). ... I enabled the Windows Firewall and poked holes for HTTP, FTP, ... >> on the FTP service just fine using Internet Explorer's FTP service, ...
    (microsoft.public.windows.server.networking)
  • Re: RRAS and RDP issue
    ... While the VPN configuration was not the issue, ... > look into the basic firewall setting in RRAS. ... > expand the server tree ) then expand the IP Routing ...
    (microsoft.public.windows.server.sbs)
  • Re: Passive FTP on PPPoE connection
    ... It sounds like you're having problems more with RRAS than with FTP - you ... Disabling the firewall solves all problems, ... > range for passive FTP and open that range in the RRAS firewall. ...
    (microsoft.public.inetserver.iis.ftp)
Loading