Re: Internal vs External www access

Hi Terence,

I only recently ran the CEICW wizard, and it had some bad affects on my
system (specifically: It reset all the email addresses, even though the
email address configs had been updated)... So you can understand my
reluctance on running the wizard on a live system.

I will however check out the other points (nslookup etc) and get back to
you.

Adrian

Terence Liu [MSFT] wrote:
Hello Adrian,

Thank you for kind update.

Step 1: You have to rerun the CEICW to make sure your SBS 2003 server have
right network configuration. Go through the follow KB and Rerun CEICW again
carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us

Step 2: Reconfigure RRAS
Open Routing and Remote Access console. Right-click the server name and
choose 'Disable Routing and Remote Access'. Clean up the RRAS settings.
Open Server Management console, Go to Standard Management\To Do List. Click
the "Configure Remote Access" link. Follow this wizard to reconfigure the
VPN setting.

Step 3:
Open the Server Management -> Advanced Management -> Computer Management
(Local) -> Services and Applications -> Routing and Remote Access, right
click Expand the <Server Name> (local), select properties. Then click IP
tap, you can set the VPN client IP addresses here. Try to use the different
subnet from your internal network. Then test this issue.

Step 4:
Please point all internal clients' DNS to SBS NIC address. This will make
the client can resolve the name "companyweb" to SBS NIC IP address.

If the issue persists, please kindly help me collect some information for
further investigation:

1. Do all internal clients have the same companyweb access issue?

2. Does the same issue happen on VPN clients?

3. Can you resolve companyweb from problematic client via command "nslookup
companyweb"?

4. Try to disable the RRAS (Open Routing and Remote Access console.
Right-click the server name and choose 'Disable Routing and Remote Access'.
Clean up the RRAS settings), then test the internal companweb access, is it
fine?

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Message-ID: <45BA6180.3030309@xxxxxxxxxxxxxxxxxxxxxxx>
| Date: Fri, 26 Jan 2007 20:16:00 +0000
| From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
| User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
| MIME-Version: 1.0
| Subject: Re: Internal vs External www access
| References: <45B90C10.70109@xxxxxxxxxxxxxxxxxxxxxxx>
<D9f6sqSQHHA.4032@xxxxxxxxxxxxxxxxxxxxxx>
<45B9D144.2020804@xxxxxxxxxxxxxxxxxxxxxxx>
| In-Reply-To: <45B9D144.2020804@xxxxxxxxxxxxxxxxxxxxxxx>
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 7bit
| X-Antivirus: avast! (VPS 000706-3, 26/01/2007), Outbound message
| X-Antivirus-Status: Clean
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: 213-162-121-253.adrian080.adsl.metronet.co.uk
213.162.121.253
| Lines: 1
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:13051
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I've a theory on this...
|
| I'm pretty sure that just before this started, I shifted our VPN access
| from a Draytek router, to RRAS on the SBS server, setting up RRAS.
|
| The SBS is a single NIC server, with an IP of 192.168.50.3
|
| When I look into the RRAS config, I see that its assigned itself another
| IP address of 192.168.50.90 for the "internal" adaptor.
|
| I'm not sure where it gets this other IP from. But what if the clients
| are accessing 192.168.50.90 instead of .3 ? The config for companyweb
| in IIS only lists .3 in the Access Control.
|
| What I'd actually like, is for VPN clients to have their own subnet (say
| 192.168.52.0/24). I've setup DHCP for that subnet, and I'm guessing I
| need to update RRAS so that "internal" reflects an IP in the 52 range
| (eg 52.1), then add routes.
|
| In the meantime, I'll add 50.90 to the IIS access config.
|
| What do you think of the theory?
|
| Adrian
|
|
| Adrian Marsh (NNTP) wrote:
| > What I'm saying is this:
| >
| > I've one subnet: 192.168.50.x
| > Theres no public access to companyweb.
| >
| > When I access http://companyweb from a PC (192.168.50.155), I
| > (somteimtes) get the page that says:
| >
| > Welcome to Windows Small Business Server 2003
| > To get started, click a link.
| >
| > Instead of the internal site (with the Announcements page).
| >
| > Looking in the IIS log, I see the below.
| >
| > We have recently changed IP subnets, however we re-ran the wizards on
| > the SBS server to update the IPs.
| >
| > 2007-01-26 09:55:29 GET /Default.htm - 192.168.50.155 HTTP/1.1
| >
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+C
LR+2.0.50727)
| > - 304 297
| > 2007-01-26 09:55:29 GET /images/sbslogo.gif - 192.168.50.155 HTTP/1.1
| >
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+C
LR+2.0.50727)
| > http://companyweb/ 304 248
| > 2007-01-26 09:55:29 GET /images/sts.gif - 192.168.50.155 HTTP/1.1
| >
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+C
LR+2.0.50727)
| > http://companyweb/ 304 248
| > 2007-01-26 09:55:29 GET /images/spacer.gif - 192.168.50.155 HTTP/1.1
| >
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+C
LR+2.0.50727)
| > http://companyweb/ 304 248
| > 2007-01-26 09:55:29 GET /images/clientsetup.gif - 192.168.50.155
| > HTTP/1.1
| >
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+C
LR+2.0.50727)
| > http://companyweb/ 304 248
| > 2007-01-26 09:55:29 GET /images/help.gif - 192.168.50.155 HTTP/1.1
| >
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+C
LR+2.0.50727)
| > http://companyweb/ 304 247
| > 2007-01-26 09:55:29 GET /images/remote.gif - 192.168.50.155 HTTP/1.1
| >
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+C
LR+2.0.50727)
| > http://companyweb/ 304 248
| >
| >
| > Terence Liu [MSFT] wrote:
| >> Hello Adrian,
| >>
| >> Thank you for posting here.
| >>
| >> From your description, I do not understand you situation very clearly.
| >>
| >> According to your description, I understand that you get different
pages
| >> when you access companyweb from internal and external. If I have
| >> misunderstood the problem, please don't hesitate to let me know.
| >>
| >> From my side, I do a test on my test machine. In internal I access
| >> companyweb via http://companyweb/, in external I access companyweb via
| >> https://FQDN:444. I get the same page of companyweb. The only
different is
| >> that I have to input username and password when I access from external.
| >>
| >> Please let me know the detail steps what you do, I want to reproduce
this
| >> issue. Meanwhile, please capture screenshots on the different pages
and
| >> send the pictures to me at v-terliu@xxxxxxxxxxxxx
| >>
| >> Before we go any further, please let me know the following information
so
| >> that we can understand your situation more clearly.
| >>
| >> 1. Please let me know the detail topology of your network.
| >>
| >> 2. Where are you access companyweb get 404 error, internal or
external?
| >> Please capture screenshots on the error page and send the pictures to
me at
| >> v-terliu@xxxxxxxxxxxxx
| >>
| >> 3. Please gather system info on SBS and send to me
| >> a. Click Start and then Run.
| >>
| >> b. Type in "msinfo32" without the quotations and click OK.
| >>
| >> c. Once System Information is up and running, click File and then
Save.
| >> Save the system information to a .nfo file.
| >>
| >> I appreciate your time and look forward to hearing from you.
| >>
| >> Thanks and have a nice day!
| >>
| >> Best regards,
| >>
| >> Terence Liu(MSFT)
| >>
| >> Microsoft CSS Online Newsgroup Support
| >>
| >> Get Secure! - www.microsoft.com/security
| >>
| >> =====================================================
| >> This newsgroup only focuses on SBS technical issues. If you have
issues
| >> regarding other Microsoft products, you'd better post in the
corresponding
| >> newsgroups so that they can be resolved in an efficient and timely
manner.
| >> You can locate the newsgroup here:
| >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >>
| >> When opening a new thread via the web interface, we recommend you
check the
| >> "Notify me of replies" box to receive e-mail notifications when there
are
| >> any updates in your thread. When responding to posts via your
newsreader,
| >> please "Reply to Group" so that others may learn and benefit from your
| >> issue.
| >>
| >> Microsoft engineers can only focus on one issue per thread. Although
we
| >> provide other information for your reference, we recommend you post
| >> different incidents in different threads to keep the thread clean. In
doing
| >> so, it will ensure your issues are resolved in a timely manner.
| >>
| >> For urgent issues, you may want to contact Microsoft CSS directly.
Please
| >> check http://support.microsoft.com for regional support phone numbers.
| >>
| >> Any input or comments in this thread are highly appreciated.
| >> =====================================================
| >>
| >> This posting is provided "AS IS" with no warranties, and confers no
rights.
| >>
| >> --------------------
| >> | Message-ID: <45B90C10.70109@xxxxxxxxxxxxxxxxxxxxxxx>
| >> | Date: Thu, 25 Jan 2007 19:59:12 +0000
| >> | From: "Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx>
| >> | User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
| >> | MIME-Version: 1.0
| >> | Subject: Internal vs External www access
| >> | Content-Type: text/plain; charset=ISO-8859-1
| >> | Content-Transfer-Encoding: 7bit
| >> | X-Antivirus: avast! (VPS 000706-2, 25/01/2007), Outbound message
| >> | X-Antivirus-Status: Clean
| >> | Newsgroups: microsoft.public.windows.server.sbs
| >> | NNTP-Posting-Host: 213-162-121-253.adrian080.adsl.metronet.co.uk
| >> 213.162.121.253
| >> | Lines: 1
| >> | Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| >> | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:12806
| >> | X-Tomcat-NG: microsoft.public.windows.server.sbs
| >> |
| >> | Hi,
| >> |
| >> | I know that the SBS server presents a different page, if you access
| >> | companyweb for when a user is inside the LAN or outside (one gives
the
| >> | Announcements page, the other gives a link to access the main
internal
| >> | page).
| >> |
| >> | However, if you have a multi-subnet LAN, where do you list the other
| >> | subnets in IIS so that they treated the same as the same subnet that
the
| >> | SBS server is on ?
| >> |
| >> | I'm guessing this isn't a permissions issue, or I'd get a 404. So
maybe
| >> | its part of the default.aspx scripts or something ?
| >> |
| >> | Adrian
| >> |
| >>
|

.

Relevant Pages

  • Re: Port 443 for OUTLOOK WEB ACCESS
    ... > Thank you for posting in SBS newsgroup. ... Click To Do List and then click "Connect to the Internet". ... Go through the steps until the Web Server Certificate page is showed. ...
    (microsoft.public.windows.server.sbs)
  • Re: RPC over HTTP scenario
    ... Les Connor [SBS Community Member - SBS MVP] ... The firewall, an external device to the server, is what has the ... internet, it is exactly the name you would use for the certificate. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: R2 w/ISA User type account cannot use my companys internal website
    ... Alerts\Core Server Alerts ... Microsoft CSS Online Newsgroup Support ... And our product group is still reviewing the impact of the upgrade SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: Internal vs External www access
    ... You have to rerun the CEICW to make sure your SBS 2003 server have ... How to configure Internet access in Windows Small Business Server 2003 ... Please point all internal clients' DNS to SBS NIC address. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: R2 w/ISA User type account cannot use my companys internal website
    ... can refer to the steps below to reinstall the SBS Monitoring component. ... Select Windows Small Business Server 2003 and then click Change/Remove. ... select Microsoft SQL Server Desktop Engine ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
Loading