RWW fails from Internet

Hello:

I have configured Remote Web Workspace on a SBS 2003 server, fully patched. I
can access RWW via https from internal clients, but when I try from the
Interent it fails with "Cannot find server" and "The page cannot be displayed".
I am trying https://111.22.33.44/remote (where 111.22.33.44 is the static
public IP).

I have forwarded tcp port 443 and 4125 through the Cisco router (we are not
running ISA). I also have several other ports forwarded, and they work
correctly. Since I do not yet have control of our public DNS records (it's
coming), I am testing this from the Internet using just the public IP address.
This has worked for other SBS configurations I have done.

The access-list portion of the IOS configuration is below.
router#sh access-list 101
Extended IP access list 101
10 permit tcp any host 111.22.33.44 eq 1723
20 permit gre any host 111.22.33.44
30 permit tcp any host 111.22.33.44 eq 22
40 permit tcp any eq 443 host 111.22.33.44 eq 443
50 permit tcp any eq 4125 host 111.22.33.44 eq 4125
60 deny ip 192.168.1.0 0.0.0.255 any
70 permit icmp any host 111.22.33.44 echo-reply
80 permit icmp any host 111.22.33.44 time-exceeded
90 permit icmp any host 111.22.33.44 unreachable
100 deny ip 10.0.0.0 0.255.255.255 any
110 deny ip 172.16.0.0 0.15.255.255 any
120 deny ip 192.168.0.0 0.0.255.255 any
130 deny ip 127.0.0.0 0.255.255.255 any
140 deny ip host 255.255.255.255 any
150 deny ip host 0.0.0.0 any
160 deny ip any any log (170 matches)
router#

Thanks.

.

Relevant Pages

  • Re: Faked From-Adress with my domain on them
    ... > everybody's local mail server is adding in the host part. ... In some lists, ... Given the wide variety of mail configurations out there, ... at all practical to make the popular Debian mailers difficult to ...
    (Debian-User)
  • Re: Output Varies from Show Access-List Command
    ... Access-list 102 is applied to the outside interface incoming. ... permit icmp any host 192.168.0.30 time-exceeded ... Inspection creates dynamic ACEs in the return path so that you don't need to specifically configure static ACEs to accommodate return traffic. ...
    (comp.dcom.sys.cisco)
  • Re: best performances for the java 6 JRE: linux or solaris?
    ... I have to deploy a java/CORBA server on a new host. ... One tip is to provide maximum RAM and very effing fast hard drives. ... Are you using RAID drive configurations? ...
    (comp.lang.java.programmer)
  • Re: cisco pix 515 outside ping to internal hosts
    ... I have cisco pix 515e and would like to ping internal ... :certain host. ... :access-list 100 permit icmp any any time-exceeded ... :access-group 100 in interface outside ...
    (comp.security.firewalls)
  • Output Varies from Show Access-List Command
    ... "show access-list 102" I get varying output. ... I always get the numbered ACEs from the config. ... permit icmp any host 192.168.0.30 time-exceeded ...
    (comp.dcom.sys.cisco)
Loading