Re: Remote Access Hassles

Hi Marina,

Thanks for picking this up :) IP config for the server is:

Windows IP Configuration

Host Name . . . . . . . . . . . . : glidden-sbs2k3
Primary Dns Suffix . . . . . . . : Glidden.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : Glidden.local

Ethernet adapter LAN Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VM Network
Connection
Physical Address. . . . . . . . . : 00-0B-CD-30-06-54
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.250
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.2.250
Primary WINS Server . . . . . . . : 192.168.2.250

Ethernet adapter WAN Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX PCI Fast Ethernet
Adapte
r (rev.B)
Physical Address. . . . . . . . . : 00-50-BA-FA-88-0A
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.20.30.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.20.30.254
DNS Servers . . . . . . . . . . . : 192.168.2.250
NetBIOS over Tcpip. . . . . . . . : Disabled

Since I cannot connect from any remote client from three different LANs I
have not supplied the ipconfig for those.

I should mention that I have been able to telnet to the Exchange server OK,
so I suspect the problem is not with IP configuration. Could it be Security
Certificates to which you alluded? I can't remember what I filled in when I
first used CEICW but I have not changed the settings since. Which cert
should I be using? I have three available:

ISAcert
sbscert
certnew

I should also mention that I installed a CA server because I remember having
to do this with server2000/exchange2000 so I could use OWA and SSL. I am
not confident about certs, especially in SBS/ISA environment.

Cheers,
Bill


"Marina Roos [SBS-MVP]" <marina@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:OllArvZKGHA.3144@xxxxxxxxxxxxxxxxxxxxxxx
Hi Bill,

Please post the ipconfig/all from the server and a client. You don't need
forwarding port 80, unless you are hosting your own website.

What did you fill in for the web certificate when running CEICW? How are
you
trying to access the /remote and /exchange?

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

"Bill" <billyg1943@xxxxxxxxxxx> schreef in bericht
news:e$gYT1TKGHA.1532@xxxxxxxxxxxxxxxxxxxxxxx
Setup: Internet connects to an ADSL modem/NATing/Firewalling router which
connects to SBS 2k3 2 NICs with ISA. I have a static IP address on the
internet interface of the router. I have forwarded ports for RWW, OWA,
VPN
(4125, 1723, 444, 443 & 80) to the IP address of the WAN NIC on the SBS.
I
have run CEICW to allow these and the auto-generated ISA entries are
there
and look OK (to a newbie, anyway): Web Publishing Rules exist for RWW &
OWA
and there is an Inbound Access Rule for RWW (but not OWA).

I still can't RWW, OWA or VPN from outside the Local LAN. Have I missed
something here? Please, can someone help me sort this out?






.

Relevant Pages

  • Re: [Debian-User] Xen
    ... I've successfully re-implemented my home server using xen, ... Okay, Dom0 is on the LAN and serves up music, video, photos and pulls ... DomU1 is my firewall running a standard 3 interface ...
    (Debian-User)
  • Re: Help with Subnetting
    ... to do the same thing but it would have to have multiple NICs. ... want a DMZ which is a third interface that brings you up on the list ... Here is a very simple example configuration that I'm sure IPTables ... Same to a different server using 5589. ...
    (comp.os.linux.networking)
  • Re: WORM? ... server generating NBT-NS (port 137) traffic on WAN interface
    ... issue on the SBS2003 server itself (problem turned out to be IP Packet ... the LAN does have Trend Micro ... mentioned a WAN NIC, so I have to assume you are running 2 nics and SBS is ... packets that are leaving the SBS2003 WAN interface ... ...
    (microsoft.public.windows.server.sbs)
  • ISA configuration
    ... configured with a Proxy configuration pointing to your ... Server on port 8080. ... all destinations for the Backoffice Internet Users group. ... pointing to the primary LAN address by opening your FW ...
    (microsoft.public.windows.server.sbs)
  • Re: Seeing outside IP address when inside
    ... The main motivation for doing this is access to my FTP server: ... packets, so my FTP server uses a LAN IP address. ... passing it back out on the LAN interface to the NAT'd ...
    (uk.telecom.broadband)