SBS 2003 R2 - no client Internet access

I just reinstalled SBS 2003 R2 on new hardware - no migrations, etc.
just a clean install. It's in my home office for learning and remote
access use. I did not install ISA 2004 as I'm not interested in it's
features now. I do have a dual-NIC setup and DHCP is turned off on my
router. The SBS box is handing out DHCP addresses fine and DNS works.
I can use nslookup to get DNS queries but when I try to browse to
those websites (e.g. microsoft.com) it fails - both on the server and
from connected clients. If I switch the gateway on the clients away
from the internal NIC on the server to the router, I can get to
external web sites, VPN to the office, etc. Here's my ipconfig on the
server and the nslookup results (.21 is the internal NIC and .23 is
the external NIC, both are static):

Windows IP Configuration

Host Name . . . . . . . . . . . . : c3po
Primary Dns Suffix . . . . . . . : wrb.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : wrb.local

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
Ethernet NIC
Physical Address. . . . . . . . . : 00-19-DB-5D-A6-52
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.21
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.1.21
Primary WINS Server . . . . . . . : 192.168.1.21

Ethernet adapter Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NETGEAR FA311/FA312 PCI Adapter
Physical Address. . . . . . . . . : 00-09-5B-1B-2A-D5
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.23
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.21
Primary WINS Server . . . . . . . : 192.168.1.21
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Documents and Settings\Administrator>nslookup
Default Server: c3po.wrb.local
Address: 192.168.1.21

www.microsoft.com
Server: c3po.wrb.local
Address: 192.168.1.21

Non-authoritative answer:
Name: lb1.www.ms.akadns.net
Addresses: 207.46.20.60, 207.46.19.190, 207.46.199.60, 207.46.18.30
207.46.19.254, 207.46.198.60, 207.46.198.30, 207.46.19.60
Aliases: www.microsoft.com, toggle.www.ms.akadns.net
g.www.ms.akadns.net


Here's an IP config from a client - currently it's static w/ default
gateway of .1 (router). If I use DHCP, then .21 (internal NIC of
server) is used throughout (DHCP, DNS, gateway) as it should but I
can't access anything outside of my LAN:

Windows IP Configuration

Host Name . . . . . . . . . . . . : quigon
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : wrb.local
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2915ABG
Network Connection
Physical Address. . . . . . . . . : 00-0E-35-F7-CB-40
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated
Controller
Physical Address. . . . . . . . . : 00-11-43-71-B9-FD
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . :
fe80::941e:a3d0:29e1:d5f5%7(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.27(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.21
NetBIOS over Tcpip. . . . . . . . : Enabled

Again, I'm not using ISA 2004 and I haven't installed it. RRAS and NAT
seem okay but I'm not sure what to look for. It seems like a routing
problem to me as DNS names are resolving, I just can't seem to get
traffic to go across the SBS box out to the Internet. Also, I have run
CCIEW several times, both with the firewall settings on and disabled
but nothing works.

.

Relevant Pages

  • RE: Problems with shares over remote connection
    ... The problem occurs on all shares on the SBS ... The problem occurs on 6 of 6 remote clients that I have tried ... Connection-specific DNS Suffix. ... PPP adapter Connect to Small Business Server: ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2008 and RWW - cannot connect from remote clients
    ... I understood that using the loopback address sent everything DNS back to the server to handle. ... You will see that it looks to some extent like it has - but it doesn't appear in the SBS console list of computers, and has generated the error message that the domain is unknown. ... Ethernet adapter Local Area Connection: ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Problems accessing SBS 2003 Welcome screen from Internet
    ... I think you have a misconfigured network. ... SBS External NIC ... the load on the SBS server and make troubleshooting a little easier. ... > Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Client PCs and NAS not visible on server
    ... I have applied the patches for Vista compatibility with the server. ... This is SBS 2003, yes? ... Connection-specific DNS Suffix. ... Windows SharePoint Services 2.0 RTM version installed. ...
    (microsoft.public.windows.server.sbs)
  • Re: Server 2008 Folder Redirection
    ... Directory Server Diagnosis ... (Event String (event log = System) ... "Meinolf Weber" wrote: ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.general)
Loading