Re: External Access to Companyweb Fails

Thank you for responding.

Allow me to quickly reply to your points:

New SBS 2003 Standard install using two NICs. External Router Used with all
required ports forwarded.Wizards used throughout installation, everything
works OK - except accessing Companyweb through RWW. (OWA OK &
server/workstation desktop access OK.)

Can access ping Companyweb internally and access it via both HTTP and HTTPS.
All IIS settings checked as per your suggestions.
IE caches emptied and cookies deleted. CEICW rerun, new certificartes
entered.

No change.

However, I did note on my router that it set to an incorrect time zone and
was reporting the incorrect time. This was reset and the router restarted -
now all OK!! Can this be possible!

Regards

Norm Hughes

""Crina Li"" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:GaMaDQkUGHA.4332@xxxxxxxxxxxxxxxxxxxxxxxx
Hi Hughes,

Thank you for posting in SBS newsgroup.

From the description, I understand the issue to be: you got error message
when you access companyweb from internet clients. If I have misunderstood
your concerns, please do not hesitate to let me know.

To narrow down the problem, would you please help me confirm the following
information?

1. Is there any hardware router or firewall installed in front of the SBS
2003 server? If so, please make sure that you have configured the network
device to forward the TCP 444 port request to the SBS server.
2. As we need to access companyweb through port 444 which is not the
default SSL port which is 443, you may experience the problems described
in
the following KB article if the remote clients are behind ISA server:

283284 Blank Page or Page Cannot Be Displayed When You View SSL Sites
Through
http://support.microsoft.com/?id=283284

3. If you use a computer to directly connect with the external NIC of the
SBS server, can you access https://IP_Address:444/, or can you telnet the
444 port of the SBS server?
4. Open a command prompt on internet client, type ''ping companyweb''
(without the quotation marks) and press Enter. What's the result?
5. Clear IE cache on internet client:

Open Internet Explorer. Click 'Tools'->'Internet Options'. In 'General'
tab, click 'Delete files' and 'Delete cookies' buttons. Will the issue be
resolved?

6. In IIS, make sure that Companyweb is listening on the 444 port on every
network interface on your SBS server and the permission. To do so, please
follow the steps below:

1) Open IIS.
2) Right-click Companyweb and then click Properties.
3) Click Advanced in the Web Site tab.
4) Click to select the entry that includes SSL port 444, and then click
Edit.
5) Make sure that we choose " (All Unassigned)" in the IP address list.
6) Click OK to close the open windows.
7) Click the "Directory Security" tab.
8) In the "Authentication and access control" section, click the Edit
button.
9) Make sure only the following boxes are checked:

Integrated Windows authentication

10) Click OK.
11) In the "IP address and domain restrictions" section, click the Edit
button.
12) Make sure "Granted access" is selected and there are no items in the
list box.
13) Click OK.
14) Click the "Documents" tab and make sure "Enable default content page"
is select and the following items are listed in order:

Default.htm
Default.asp
index.htm
Default.aspx

If any items are missing, please add them and make them the correct order.

If it does not help, please try to follow the detailed steps to
reconfigure
CEICW and you can also refer to the KB 825763:

1. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.
2. Click the "Connect to the Internet" link.
3. Choose not to change the connection type and click Next. On the
Firewall
page, select "Enable firewall" and click Next.
4. On the "Services Configuration" page, select all the items and then
click Next.
5. On the "Web Services Configuration" page, make sure "Allow access to
the
entire Web site from the Internet" is selected. If you select "Allow
access
to only the following Web site services from the Internet", make sure the
web sites you want to publish are selected. Click Next.
6. On the "Web Server Certificate" page, choose to create a new Web server
certificate and then type the public FQDN of SBS.
7. Go through the remaining steps.
8. If you have a router or hardware firewall, configure it to forward
inbound traffic on TCP port 80 and 443 to the SBS server's external
address.

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

If you have any questions or concerns related to this issue, please do let
me know.

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.
--------------------
| From: "N. Hughes" <quadrantcomputerNOSPAM@xxxxxxxxxxx>
| Subject: External Access to Companyweb Fails
| Date: Mon, 27 Mar 2006 16:52:20 +1100
| Lines: 10
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
| X-RFC2646: Format=Flowed; Original
| Message-ID: <OSq$CJWUGHA.4956@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: adsl-129-136.swiftdsl.com.au 218.214.129.136
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:255817
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| New standard SBS 2003 Install - everything is working except the above,
we
| get a warning about insecure/secure items then "The page Cannot be
| Displayed". Companyweb OK internally. Reran the CEICW in case silly
error
-
| if it's there can't see it. Ports opened on Router as recommended. Can
| access OWA, Help, client desktops via RWW - just not Companyweb. What
have
| I forgotten?
|
| TIA, Norm Hughes
|
|
|



.