RE: SBS2003SPS1 Routing to Firewall problem



Dear Philip:
Thank you for posting here.
>From the description, I understand that after you installed SP1 on the SBS
2003 Server, the branch office can no longer access the internet. If I am
off base, please do let me know.

Before we go any further, can you tell me the definite network diagram? For
example, I assume the diagram as following:
{Internet}===={Router}===={Cable Modem}===={Cable Modem}===={Branch office}
\
\======{SBS Server at the
Main office (one NIC)}
\====={Internal client
at the Main office}
If the above diagram is not accurate, please send me a correct one.

To narrow down this issue, could you do me a favor and gather the following
information:
1. What's the OS version of computer at the branch office? Have they joined
the domain? Is there a server at the branch office?

2. Once we applied the SBS 2003 SP1, we need to re-run the CEICW Wizard,
the wizard help us automatically configure the network settings. Please
refer to this step-by-step article to finish the wizard:
825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Note: Since your SBS Server only has one NIC, please follow the single
network adapter section.

3. Please type ipconfig /all at both the SBS Server and the computer at
branch office side, send the output to me in the reply at your convenience.
Please also tell me the IP address of your router.

4. From the workstation at the branch office side, can you access the
shared folder on the SBS Server using \\ip\shares?

5. From the branch office, go to the command prompt, type nslookup and then
input www.microsoft.com, does name resolution work?

6. From the workstation at the main office side, can you ping the IP
address of your router?

7. Do you have ISA Server installed? If so, what's the version of the ISA?
If you have any anti-virus software installed on the Server/clients, please
temporarily disable it and see if it helps.

8. When you applied the Service Pack 1 for SBS 2003, what else have you
made to the SBS Server?

9. On the SBS server, have you found any related event logs in the Event
Viewer? Please also check it on the computer at the branch office side and
send the event log to me in the reply.

In addition, please note that we cannot perform the routing function in
RRAS on a single network adapter based computer, two NICs are required at
least.

Moreover, if possible, please temporarily cut off the network connection of
the SBS Server 2003 at the non-working hours and see if the branch office
can ping the router and browser the internet.

I hope the above information helps. Thank you very much for your time and
patience.

Please feel free to let me know if you have any questions and concerns.
Have a nice day! :)

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Flipside" <headsync@xxxxxxxxxxxx>
| Subject: SBS2003SPS1 Routing to Firewall problem
| Date: Tue, 6 Sep 2005 15:41:29 +1000
| Lines: 38
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#Fm0gWqsFHA.2748@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: boran-pu03q5b1a.cmts01.mql.ncable.com.au 203.208.83.119
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:151059
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi everyone,
|
| Since installing SP1 (all components) on an SBS2003 server, some PC's
can't
| ping or gain outside access through the router/firewall.
|
| Here's the set up...
|
| SBS2003SP1 - 1 NIC, Ip masked /16, Firewall Router on same network
segment
| also masked /16 can be pinged and Internet accessed by ALL computers on
this
| side of the network.
| The site has a Layer2 cable modem to cable Modem link to a remote office
| (this acts as a secure transparent pipe between the offices).
| The remote office uses /16 masking also, and before installing SBS SP1
they
| could ping the router and get internet access via that router.
| Since SBS SP1 was installed, EVERY PC at the remote office can ping
| everything at the main office EXCEPT the router x.x.x.1/16 and therefore
| they can't get VPN or internet either!
|
| I've tried using the server (main office) as the default gateway for the
| remote office PC's with RRAS set up on the SBS2003 using static routes to
| force their outside destination traffic to the router, but that doesn't
work
| either.
| I thought that perhaps SP1 introduced something in a Group Policy that
could
| be stopping this, but I can't see anything that would create this
problem...
|
| Has anyone got any ideas?
|
| It's wierd because it all worked fine until SP1 was installed on the
SBS2003
| server at the main office.
|
| I've searched the internet and can't find ANY reference to this... :(
|
| PLEASE help!
|
| Thanks,
| Philip
|
|
|

.



Relevant Pages

  • RE: Help with Internet and Email wizard
    ... Thank you for posting in the SBS newsgroup. ... On SBS Server, run the CEICW, go through "Connection Type" page, on ... Since we don't want to set up an external internet access, ... We can select Option one "Create a new Web server certificate" to ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Set the 'external' interface of SBS to get it's IP via DHCP from the router ... If the ws does not get an IP from DHCP check the event log on the server, ... They can go one day with out internet, ...
    (microsoft.public.windows.server.sbs)
  • Re: ICMP error when trying to access OWA on SBS 2003 Premium
    ... The Default Web Site is set to listen on the internal IP of the SBS server ... OWA publish rule or IIS manually. ... entire Web site from the Internet" is selected. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 IIS BASED SERVICES FAIL INTERMITTENTLY
    ... If I read your post correctly, you have a switch where the SBS ... Run DHCP server on your SBS, and set all client machine nics to dynamic. ... Once you have your nics configured, run the Connect to the Internet wizard, ... QUESTION1 - what is REFUSING CONNECTIONS? ...
    (microsoft.public.windows.server.sbs)
  • RE: access internal resources using external fqdn
    ... Thank you for posting to the SBS Newsgroup. ... FQDN to access your SBS resources from the Internet. ... 825763 How to configure Internet access in Windows Small Business Server ...
    (microsoft.public.windows.server.sbs)

Loading