Re: CEICW fails - several errors

cjobes wrote:
The firewall isn't used when ISA is installed.

I understand that. There are two services with "Firewall" in the name:
1) Microsoft Firewall (apparently installed with ISA Server)
2) Windows Firewall / Internet Connection Sharing

I assume that Firewall (2) is used when you want to configure a
firewall without ISA Server, as CEICW offered to do when it said
something like "You have ISA Server 2000 installed but it is not
running. If you do not want to use ISA Server, quit the wizard,
uninstall ISA Server 2000 and re-run the wizard: Routing and Remote
Service will be used for Firewall and NAT"

Are you running SBS2000? If
you are running SBS2003, upgrade to ISA2004.

I am running SBS 2003. ISA2004 isn't free, is it? I am not sure that I
will be able to convince my boss to spend the money, whatever it is,
especially since he has Internet (I added a 10.x.x.x address to his NIC
and set his gateway to 10.0.0.138, and set his Contol Panel Internet
conection to Direct). Also, I am not sure that this Ipnat.sys thing
would not affect ISA Sever 2004 also. If there is a trial version
available, I can install it. That would give me 3 or 6 months to
convince my boss to buy it, assuming that it works.

At this point I would totally
uninstall the ISA, reboot the box and re-install ISA. Afterwards apply the
relevant SP.

Having tried various configurations and achieved results that were
unsatisfactory for one reason or another, the very last thing I did was
what you suggested. I uninstalled ISA Server completely, rebooted, and
re-applied the service pack. In this way, everyone has web browsing.
They never used SMTP or POP3. My boss uses Outlook Express to access
his Hotmail. I believe that that does not work in my current
configuration. It seems that the Web proxy is ok, but the Winsock proxy
is not, and the Winsock proxy client has to be working to allow Outlook
Express to download HotMail. There is a Microsoft KB article about
that. Anyway, I am working around that as described above.

I'm not sure about the Exchange portion. If you are using SMTP
with DNS, you need to put it your domain. As far as I know, installing a
cert for your xxx.local address will not enable you to connect via OWA and
RWW. How would you get to your box from the outside world?

We have never had a static IP address or a registered domain name. She
could send e-mail via Exchange using Outlook 2003. I am not sure when
it stopped working, but it has probably been a few weeks. I set up the
users in her department to share an ISP account. In Outlook 2003, she
sends the mail as user@xxxxxxx, not user@xxxxxxxxxxxxx Replies would
naturally go to the ISP account, which would be downloaded by the POP3
connector to the public folder that is using that address as its
default address. She only had to remember to manually type the ISP
address in the From: field and everything worked just fine.

I was not really trying to publish OWA and RWW to the outside world. I
enabled them just for the sake of enabling something.

.

Relevant Pages

  • Re: Firewall problem
    ... Forget Microsoft's suggestions about staying secure. ... > on of the most veritile firewall solutions arround. ... >> We're using MS ISA server as our firewall. ... >> However we can't connect telnet traffic, nor can I ping internet sites, ...
    (Security-Basics)
  • error downloading http://java.sun.com/webapps/download/GetFile/1.4.2-b28/windows-i586/Java 2 Runtime
    ... We are using an ISA server in cache mode to connect to internet. ... there is a viruswall and a firewall. ... the web-application for the first time, the Java Installer is launched. ...
    (microsoft.public.isa)
  • RE: ISA Server 2004 problem
    ... Did you install the firewall clients on the workstations trying to connect to ... I've just installed ISA Server ... > Internet access, I have created a new policy allowing all users to access the ... > client machines but i cannot ping the server from client machines. ...
    (microsoft.public.isa.configuration)
  • Re: CEICW fails - several errors
    ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA2004 client firewall slow webpage loading
    ... have you configured this new client as web proxy client? ... configure ISA server as your Proxy ... stop the Microsoft Firewall service. ...
    (microsoft.public.windows.server.sbs)
Loading