RE: Server Re-Setup Help

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hi Jenny,

You are correct in how we had things set up. I believe that the problem was
the motherboard or CPU, though, because the server completely died last night
and would not restart. It would get part way, and then start over. We
replaced everything except the motherboard, CPU, and hard drive. Because we
could not get the server going, this left us scrambling. We were able to get
something going temporarily, to at least let customers know that our site was
having problems, and started a clean installation on a new hard drive. We
still had a host of problems.

I am now installing yet again, and will use a more standard option. Because
we use multiple IP addresses on one NIC, and routers don't often allow this,
I will just do the following:

Internet -> SBS Server -> router -> internal workstations

Does this sound good? If you can suggest a router that will allow multiple
IP addresses on a single port, or a firewall that does not handle routing,
then I am happy to get it at this point to go between the internet and the
SBS Server.

Should I set the WAN port on the router above to obtain an IP address from
the SBS Server, or should I give it a static address in the same range as the
SBS Server local connection (192.168.16.?)?

Regards,

Rick

""Jenny wu [MSFT]"" wrote:

Hi Rick,

Thanks for your update. I appreciate your time and efforts to the issue.

Can I conform to your network topology as follows:
->SBS server (2 NIC, with 4 public IP)
Internet -> hub - {
-> Router (with 1 public IP) -> {internal
network}

Is it true?

If you setup network like above, the computers in internal network access
the SBS server box is the same as the internet computers although they are
in the same physical location. All requests from internal network to SBS
server is transferred in internet since they have different public IP. You
need open port 25, 80, 443, 444, 4125, 3389 in the Router, so that these
traffic can be allowed between SBS server box and computers in 'internal
network'.

However it is not recommended that you setup SBS network like this. I do
not understand that why you separate them using router. Can you describe me
more detail about what you want to achieve

The following scenarios are recommended:

One network adapter:
-> SBS server
Internet -> Router - {
-> {internal workstations}

Two network adapters:

Internet -> Router -> SBS server -> {internal workstations}

Or
Internet -> Router -> SBS server ->hub -> {internal workstations}

You can setup network in two network adapters scenario for more security.

I suggest that carefully take a look the following KB article to get more
information about setup network in SBS environment:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

324287 HOW TO: Use Host Header Names to Configure Multiple Web Sites in
http://support.microsoft.com/?id=324287

More information:
Securing Your Windows Small Business Server 2003 Network
http://www.microsoft.com/downloads/details.aspx?familyid=ccf92588-f367-4d25-
8501-b4f680280f71&displaylang=en

Please let me know if you have further question on the issue. I am happy to
be of assistance to you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
Thread-Topic: Server Re-Setup Help
thread-index: AcZ5ug33F/Wbg+bGR9GjKGBSn3PvJA==
X-WBNR-Posting-Host: 71.244.45.98
From: =?Utf-8?B?QnJld2hhdXM=?= <Brewhaus@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <F875B352-ECD0-4445-8F9A-20E206FB4EAF@xxxxxxxxxxxxx>
<uUmJ60YeGHA.4672@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Server Re-Setup Help
Date: Wed, 17 May 2006 06:59:03 -0700
Lines: 240
Message-ID: <86243691-3D4E-48E2-8C9C-5C56E0C30E43@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.windows.server.sbs
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:268657
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi Jenny,

Thank you very much for your input. Before I change anything, let me try
to
describe our setup, and you can suggest how I change it to best server our
needs.

Currently, we have five IP addresses. Four of these are allocated to the
server, which is connected directly to the internet. There is no router.
We
are on a Fiber Optic line, which brings an ethernet connection directly
from
the wall, so there is no router / firewall in place. The server is just
connected to a hub, which connects directly to the outlet in the wall. We
give one of the NICs four of our IP Addresses so that it will handle our
websites. Right now, we have a second NIC in place, which we have set to
obtain an IP automatically. There is no ethernet cable connected to it,
so
it simply defaults to a 169 address.

We run a second connection from the hub to a router, which controls our
internal network. The WAN on the router is given a static IP address (the
one address that we have remaining), so it connects directly to the
internet
as well. I would expect this to act as a separate internet connection
from
our server, as they both use different IP addresses.

What is very strange is that people in other places can access our
websites.
It seems that the only computers unable to connect to our server are
those
behind the router mentioned above. When I try to load our website or
connect
to e-mail, etc., from one of our computers behind the router we simply
cannot
get a connection- it times out. Absolutely nothing was changed on the
internal computers or the router.

Our server is maintained in my home so that I am around if there is a
problem. Our warehouse is in a different location (a few miles away), and
can access the websites, log in to the server remotely, etc. That is what
I
meant when I mentioned that we could access from the warehouse, but not
locally.

This was working previously, but after shutting down to install the new
power supply, it stopped working.

I was going to remove the second NIC, and keep only the one that connects
to
the internet. But, when I do this and try to run the internet connection
wizard, it says that I cannot use 'direct broadband connection' with only
one
NIC. Because I am literally connected directly to the internet, can I
still
remove the second NIC and select a different connection option? I just
want
the server to handle our websites and e-mail, but did not know how to
close
ports. In reality, we need only a few ports open to run what we do.

Would I be better to connect the internal computers to the server on the
second NIC? The only reason that we did not do this is that we do not
want
the extra load on the server in case it would slow our websites down at
all.

I am at a complete loss, so will await your suggestions on how I should
set
my connection(s) up.

Thanks again. I really look forward to your input so that I can get
things
operating properly again.

""Jenny wu [MSFT]"" wrote:

Hi Rick,

Thanks for posting here.

From your description, I understand the issue to be: users can not
access
the SBS server from some computers but can from other computers without
problem. If I am off base, please don't hesitate to let me know.

From your description, I understand that you indeed use one NIC to
connect
to the route, another NIC is not be used. In your scenario, you can
remove
the second NIC from the server and use only one NIC. Please note that
after
you remove the NIC, please re-run CEICW to re-configure network
connection
regarding to one NIC scenario. I suggest that you refer to the KB 825763
to
configure network connection.

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

If the ISA server has not been installed on the SBS server, we can
enable
RRAS basic firewall to offer basic firewall protection. You can use
Router
to provide more security of your network. It is not recommended we open
too
many ports in the router since it is very insecure to our network.
Generally, we open the ports we needed to allow some specific traffic.
You
can refer to the following list:

TCP port Definition
25 Email (SMTP)
80 required for HTTP
requests for your site
443 required for HTTPS
requests using SSL, which secures communications from your server and a
Web
browser
444 Companyweb
4125 Remote Web Workplace
1723 (plus GRE Protocol 47) VPN
3389 Terminal Services
21 FTP

You open related ports only when you need allow some specific traffic.

To the users can not access the server issue, please check the following
settings:

I. Please double check DNS and Gateway settings:

1. Set the internal IP of the Router as the Default Gateway of all
client
computers and the server.
2. Configure the internal client computer's NIC to use the internal DNS
Service (the IP of the SBS server box) as the DNS Server. And there is
only
the DNS server be configured on client computers.

II. Please ensure enable NetBIOS over TCP/IP on client computers, please
check the settings.

1. Right-click My Network Places, and then click Properties.
2. Right-click the external network adapter''s Local Area Connection
icon,
and then click Properties.
3. Click Internet Protocl (TCP/IP), and then click Properties.
4. Click Advanced.
5. Click the WINS tab.
6. Click "Enable NetBIOS over TCP/IP".
7. Click OK, click OK, and then click OK.

If not, please verifying to see if the issue is resolved.

If the issue persists, please help me collect the following information
to
isolate the issue:

1. What is the exact error message you received when user try to access
the
server? How you access it? using UNC path or others? Please help me
collect
a screen shot of the error message and mail it to my working mailbox:
v-yanniw@xxxxxxxxxxxxx

2. What is the meaning of the sentence "yet the server can be accessed
from
other places (such as our warehouse)"? How user accesses the server from
warehouse? Do the computers in warehouse in the same LAN or from
internet?

3. Please run command "ipconfig /all" (no quotation marks) respectively
on
the SBS server box and one problematic client workstation and email them
to
me.

I appreciate your time. I am happy to be of assistance to you and look
forward to your reply!

.

Relevant Pages

  • Re: Outgoing POP3 email missing/lost/not received
    ... ISP's mail server instead of the domain name on the ... SUMMARY OF SETTINGS FOR CONFIGURE E-MAIL AND INTERNET ... Internet Connection Wizard. ... After the wizard completes, the following network connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect the SBS to a remote IIS for Internet Printing
    ... the server can access the Internet with no problems at all. ... Checking network connection, and after a few seconds it says The ... the problem is cause by the configuration of ISA. ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2006 Basic Configuration
    ... Why would we point Preferred DNS to itself? ... Configuring the Internal Network Interface ... In the Internet Protocol Properties dialog box, ... Select the Use the following DNS server addresses option. ...
    (microsoft.public.isa.configuration)
  • Re: SBS 2003 (no SP) - file saving over network suddenly very slow
    ... > resources turn to be slow in SBS 2003 environment. ... > the SBS server box? ... > Norton Internet Security, Norton System Works, and Norton Anti-Virus etc. ... > II Please ensure proper binding order of the network adapter cards. ...
    (microsoft.public.windows.server.sbs)
  • RE: Server Re-Setup Help
    ... This newsgroup only focuses on SBS technical issues. ... If you setup network like above, ... server is transferred in internet since they have different public IP. ...
    (microsoft.public.windows.server.sbs)