Re: Can not access Web and FTP sites from Internet



Hello Raju,

Thank you for posting back!

Thanks a lot for Susantha's great information suggestion!

Raju, your IP Configuration on the Server is correctly. I have tried to
telnet 12.208.215.87 with Port 443, following is the result I have got,
please see:

C:\Documents and Settings\v-branee>telnet 12.208.215.87 443
Connecting To 12.208.215.87...Could not open connection to the host, on
port 443
: Connect failed

Please see my suggestions:

1> From the result, we can see the telnet failed, which means the router
does not forward Port 443 to SBS Server. I suggest that you double check
whether you have successfully forwarded the Port 443 to SBS Server.

2> Please check whether you can ping 12.208.215.87 from remote computer. By
the way, as Susantha said, are you using Static IP address or dynamic IP
Address?

3> Since there is a router installed in front of the SBS server, as
Susantha said, we need to configure the port redirection on the router for
the following ports:

TCP 25 This port is used for incoming SMTP traffic. If you are using
POP3 connector, there is no need to open this port.
TCP 110 This port is used for POP3 mail clients.
TCP 443 SSL
TCP 444 Companyweb SSL
TCP 4125 Remote Web Workplace
TCP 3389 Terminal services
TCP 1723 PPTP VPN connection
GRE port (protocol number 47) This port is used for incoming PPTP VPN
connection.

Please take your time to perform my suggestions. I am looking forward to
hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>From: "Raju" <rajues@xxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Can not access Web and FTP sites from Internet
>Date: 11 Jan 2006 05:17:43 -0800
>Organization: http://groups.google.com
>Lines: 695
>Message-ID: <1136985463.826915.300590@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <1136786635.417641.195550@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <1136897870.057201.240330@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <NAt5jloFGHA.3152@xxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 12.208.215.87
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1136985468 26665 127.0.0.1 (11 Jan 2006
13:17:48 GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Wed, 11 Jan 2006 13:17:48 +0000 (UTC)
>In-Reply-To: <NAt5jloFGHA.3152@xxxxxxxxxxxxxxxxxxxxx>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: f14g2000cwb.googlegroups.com; posting-host=12.208.215.87;
> posting-account=Fd7jWg0AAADT7PMBHUbG0w9jwZ85PYBF
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
ews.com!postnews.google.com!f14g2000cwb.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:235766
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
> Brandy,
>
> Thanks staying on to help resolve my problem.
>
> I have gone through the KB article you have provided. The options
>suggested by this article match exactly what I was selecting in my
>prior runs of CEICW.
>
> But, as per your suggestion, I have gone to my router configuration,
>removed all the port mappings that pertain to my Server's IP and re-ran
>the CEICW. The wizard recongnised my router to be UpNp and this time I
>let it configure my router firewall setings automatically. Made sure I
>selected FTP and all the web sites in the listed. When it completed
>successfully, checked the router and all the port mappings are created
>perfectly by the CEICW.
>
> I can not still connect to FTP or Web using the router's external IP.
>Below is the information you wanted and I really appreciate your help.
>
>1. On the remote problematic computer, open a command window, type
>following command:
>
> Result:
>
> C:\>telnet 12.208.215.87 443
> Connecting To 12.208.215.87...Could not open connection to the
>host, on port 443
>: Connect failed
>
> Note: I used one of the computers in the intranet to do above
>telnet. In the past I had a friend try the FTP and Web from his home
>and that failed also. Does it make any difference on where I run these
>tests from?
>
>2. On the SBS Server, open a command window, type "ipconfig /all",
>copy and
>paste the full content to the Newsgroup.
>
> Result:
>
>Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : SERVER01
> Primary Dns Suffix . . . . . . . : credentialz.local
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : Yes
> WINS Proxy Enabled. . . . . . . . : Yes
> DNS Suffix Search List. . . . . . : credentialz.local
>
>Ethernet adapter Server Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
>Connection
> Physical Address. . . . . . . . . : 00-14-22-B3-68-00
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.2.2
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.2.1
> DNS Servers . . . . . . . . . . . : 192.168.2.2
> Primary WINS Server . . . . . . . : 192.168.2.2
>
> 3. Log from icwlog.txt:
>
> 1/11/2006 7:24 AM
>C:\Program Files\Microsoft Windows Small Business
>Server\Networking\ICW\wizinet.dll, version 5.2.2893.0
>calling CNetCommit::ValidatePropertyBag ().

.



Relevant Pages

  • Re: static routing
    ... Connections work going out from inside the router, ... I'll have to remove the router and connect the server directly to the cable ... A static route has been added that matches the subnet ...
    (microsoft.public.windows.server.networking)
  • Re: Cost of setting up a network
    ... A router capable of acting as a VPN endpoint for more than one user simultaneously with four Ethernet ports or a switch to suit. ... The rationale for using a server here is basically that the router doesn't need to be able to decide which PC to route the connection to. ... If you are using a router which supports it, you can set up a port-forwarding inbound rule which also _translates_ the port supplied to the receiving port. ... You can use several of these connections to different machines simultaneously. ...
    (uk.comp.homebuilt)
  • Re: Connection from remote computer to network SQL Server
    ... There is no firewall on the W2K machine acting as the SQL server. ... I tried making the SQL machine a "trusted" on the router. ... connection works. ... To find the IP address of your computer inside the network, ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Still cant connect to RWW or OWA remotely
    ... it certainly appears to be something about the SBS configuration. ... Meridian.local Ethernet adapter Local Area Connection: ... Windows SMALL BUSINESS SERVER 2003 Windows IP Configuration ... 192.168.254.254) directly to a port on the router and then ...
    (microsoft.public.windows.server.sbs)
  • Re: Still cant connect to RWW or OWA remotely
    ... it certainly appears to be something about the SBS configuration. ... Meridian.local Ethernet adapter Local Area Connection: ... Windows SMALL BUSINESS SERVER 2003 Windows IP Configuration ... 192.168.254.254) directly to a port on the router and then ...
    (microsoft.public.windows.server.sbs)