Re: Internet on nodes

are you referring to the service known as 'Windows Firewall/Internet
Connection Sharing (ICS)'?

On a properly installed and configured SBS this service should be in a
disabled state (someone please confirm this for SBS Standard, all my systems
are Premium with ISA and I don't have a test Standard to look at). Without
looking I believe it should be disabled by group policy.

Rajiv, please reread my posts and ensure you are following _exactly_ the
procedures suggested, not a mixed interpretation of them.

On an ISA 2004 system (which any SBS 2003 should be at) stopping the ISA
firewall service should result in 'ISA lockdown'. I am sorry to drag you
over the coals Rajiv but much of what you are suggesting simply doesn't make
sense.

I'm also sorry if I'm mistaken.

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:evChI$K0GHA.1568@xxxxxxxxxxxxxxxxxxxxxxx
I am indebted to you for your concern. I wanted to upload the details last
night but could not do so as Windows Firewall blocked the Microsoft and
Hotmail sites. Today morning, I stopped the Firewall in SBS and could
upload the post. Thought this may be of some help to you.

Regards,

Rajiv K. Khandelwal

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:umGDxwK0GHA.996@xxxxxxxxxxxxxxxxxxxxxxx
Just to be sure. You did use the wizard to change the IP, right?

I rarely ask for this one but I'd like to see the output from 'route
print' from both the server and a WS.

From a DOS prompt on a WS, what do you get as the result of 'ping
supergumby.dyndns.org'? Does this differ from the same performed on the
server?

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:u9AYCpK0GHA.4580@xxxxxxxxxxxxxxxxxxxxxxx
Thanks for your advice. As suggested by you the 3rd octet was changed
without any problem and the result of the SBS and WS IPconfig are
enclosed herewith as 2 text files.

Was not able to connect to the internet on the WS.

Regards,

Rajiv K. Khandelwal

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:OxcBJ3B0GHA.4228@xxxxxxxxxxxxxxxxxxxxxxx
BTW, router should be connected to 2nd NIC during this procedure.

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:u9n1q0B0GHA.1256@xxxxxxxxxxxxxxxxxxxxxxx
OK, my apologies.

We need to go back to basics. (and I'm still somewhat intrigued about
the
motivation on the domain.local vs local.lan item, but I think it's
picking
it up via DHCP from your router, interesting rather than critical).

Shutdown all attached devices except the SBS itself, your internet
router
and your network switch. Restart SBS. Run the 'Change Server IP
Address'
wizard from the 'Internet and E-mail' section of the SBS console,
putting
the server into a different local subnet. You are curently using .16
for
local and .1 for router, 3rd octet, make the 3rd octet anything other
than
these. If you want the server back in .16 run the same wiz again and
put
it back.

Report any errors. If no errors, start a workstation and post the
IPconfig
from both SBS and WS (I know, they will be similar to previous posted
info, bear with me please.)

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:%23za4WqB0GHA.3908@xxxxxxxxxxxxxxxxxxxxxxx
I have completed all the items in the "To Do List" but am not getting
anywhere.

Was myself surprised when the support staff at Microsoft said it is
not
possible to share the Internet with the workstations.

Regards,

Rajiv K. Khandelwal


"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:OkztPmB0GHA.5048@xxxxxxxxxxxxxxxxxxxxxxx
Rajiv has not completed SBS setup (I'll bet) otherwise he would not
have
manual control of the windows firewall.

I'm also curious about the motivation to somehow have arrived at a
situation where the box is in two DNS 'areas' (deliberate avoidance
of
'domain'), domain.local and local.lan (from the most recent
IPConfig), a
very unusual situation.

I may be wrong and if so apologise to Rajiv in advance but believe
he
may not have completed SBS Setup in the standard manner.

Rajiv,
do you have a link from the start button 'Server Management'? and
if
so and you choose this do you get a list which includes 'To Do
List"? If
so, have you completed all items in the 'To Do List"?

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message
news:%23NOlLVB0GHA.4408@xxxxxxxxxxxxxxxxxxxxxxx
Contacted Microsoft support and was told that SBS 2003 does not
have
internet sharing feature

Of course, this isn't true. SBS 2003 does allow Internet access
for
workstations and is configured through CEICW (Configure Email nad
Internet Connection Wizard). It does not use ICS (Internet
Connection
Sharing).

--
Merv Porter [SBS-MWP]
============================

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:etF%23WC$zGHA.4176@xxxxxxxxxxxxxxxxxxxxxxx
Thanks to your support for my problem. During the weekend, I
installed
Exchange and tried all permutations but still I was not able to
get
the internet on the nodes.

Contacted Microsoft support and was told that SBS 2003 does not
have
internet sharing feature and hence the nodes are not able to
connect
to it. This really surprised me as I was able to do that before
the
formatting of my server machine.

Till the issue is resolved I have connected the router to the
switch
and changed IP of the server LAN card to be in sync with the
router IP
and am able to access the internet both at the server and the
nodes.

Regards,

Rajiv K. Khandelwal

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:OtAQSBsxGHA.1256@xxxxxxxxxxxxxxxxxxxxxxx
I have not disabled the ISA Firewall but had to turn OFF the
Windows
Firewall on the Server. The workstation Windows Firewall is
controlled
by the Server group policy. I have no idea of the ISA firewall
software on the workstations.

Regards,

Rajiv K. Khandelwal

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message
news:uD7hYfqxGHA.4240@xxxxxxxxxxxxxxxxxxxxxxx
If the firewall in enabled then nodes do not log onto the
server
and no programme runs

So you're saying that you've disabled the ISA firewall on the
server
to allow the workstations to access the server? If so, did you
also
disable the ISA firewall software on the workstations?

--
Merv Porter [SBS-MWP]
============================


"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:%23gw$TrmxGHA.1304@xxxxxxxxxxxxxxxxxxxxxxx
Merv,

I do not get any error message. If the firewall in enabled then
nodes do not log onto the server and no programme runs. DHCP is
enabled for the entire network.

Regards,

Rajiv K. Khandelwal

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:%23Vss5vhxGHA.4960@xxxxxxxxxxxxxxxxxxxxxxx
If you run CEICW, enable the firewall, select the services and
complete CEICW, what errors do you get (if any)?

And the SBS server is handling the DHCP service for the entire
network, right?

--
Merv Porter [SBS-MWP]
============================

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:O$HrXZfxGHA.1592@xxxxxxxxxxxxxxxxxxxxxxx
Merv,

Thanks for your post. As suggested by you, on one
workstation, I
unjoined and then rejoin it to the domain without any
success.

Regards,

Rajiv K. Khandelwal

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:uveRSGexGHA.4192@xxxxxxxxxxxxxxxxxxxxxxx
After you reinstalled, did you unjoin the workstations from
the
domain and then rejoin them? If not, try it with one
workstation.

--
Merv Porter [SBS-MWP]
============================

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:ONzawVaxGHA.5040@xxxxxxxxxxxxxxxxxxxxxxx
You are absolutely right that the diagram reflects my
physical
network setup but still am not able to access internet on
the
nodes.
Do I have to open some ports in the firewall?
Do I have to adjust some settings in the firewall?
Should I disable the firewall and observe?

Regards,

Rajiv K. Khandelwal

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote
in
message news:%23e2n%23qRxGHA.4484@xxxxxxxxxxxxxxxxxxxxxxx
Does the following diagram reflect your physical network
setup?
http://www.smallbizserver.net/Default.aspx?tabid=266&ArticleType=ArticleView&ArticleID=74

Also, on the external NIC, change the IP address to static
and
not dynamic (you don't want the IP address of the external
NIC
to change unexpectly).

--
Merv Porter [SBS-MWP]
============================

"Rajiv K Khandelwal" <rajiv@xxxxxxxxxxx> wrote in message
news:eghaLMPxGHA.1284@xxxxxxxxxxxxxxxxxxxxxxx
Thanks to Merv and Jesmin for your valuable guidance. I
have
SBS 2003 SP 1 Premium Edition and have followed your
advice.
The new IPConfig of the server and node are attached
herewith
for your approval.

Though I am able to get the internet on the server, I am
not
getting it on the nodes and am not able to access the
microsoft sites on the server.

Have included the DHCP values for your kind perusal.

Regards,

Rajiv K. Khandelwal































.