Re: Remote Access

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Yep, circuits are down for maintenance, can we pick this back up tomorrow
(1400hrs GMT) when I get them back. I'll be able to check the firewall again
then.

Thanks

"kj [SBS MVP]" wrote:

ALP1970 wrote:
Hi,

I am a little confused now. I have also lost remote access to the
server so I am unable to make further changes to the firewall until
tomorrow afternoon (GMT).


How were you remotely accessing the server, RDP on 3389 directly?


I have left the firewall setup allowing HTTPS on ports 4125 and 444
through to the Static IP address of the SBS Server NIC.

What is working in RWW:

OWA

What isn't working in RWW:

Connect to server desktops
Companyweb

There is no SSL remote management running on the firewall the only
additional rule is SMTP on port 25 for the exchange server.

Setup like lis the response is ~40ms and is stable.

Any hints for when I get back on site tomorrow (1400hrs GMT).

One step at a time. Set aside 444 and the companyweb. Get RWW going first.

See the following for guidance on firewall rules.
http://support.microsoft.com/default.aspx/kb/828053

4125 is a TCP port. Not sure if that was just a typo or not.


Thanks All.....

"kj [SBS MVP]" wrote:

ALP1970 wrote:
Sorry,

I'm running a ping out and in to the SBS, when I apply rules to
allow all on 444 and 4125 the ping response time drops from 40ms to
1000ms. I am using a Netgear DGFV338.


Turn off 444 (usually just for specialty needs) and see if it
changes. That seems like quite a change with no actual traffic load.

Also make sure there is no external management over ssl enabled for
the Netgear.


"Lanwench [MVP - Exchange]" wrote:

ALP1970 <ALP1970@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Some more info:

If I add rules to point all traffic from 444

For companyweb (but if you're smart you'll allow this only w/in
RWW)

and 4125

For remote desktop

to the statis IP
address of my SBS server then it works fine, but over a period of
30 minutes performance degrades from a 30ms response to 900ms.

Well, your first post wasn't mentioning a problem, just asking for
help with a solution. Perhaps your Netgear isn't working right.
It's hard to say ....I'm not sure what you're measuring, exactly.

Thanks

Andrew

"ALP1970" wrote:

Hi,

I have Small Business Server 2003 r2 and want to run all the
remote services (Outlook, sharepoint etc). The server has one
NIC and sits behind a Netgear firewall on DSL. Can someone tell
me what are the rules I will need to run the services over SSL
only.

Thanks

ALP

--
/kj

--
/kj



.



Relevant Pages

  • Re: More on Remote Desktop
    ... Also note that if you use the default listening port for Remote Desktop there is no need to append ... >> point it to the Static IP of the internal server. ... >> firewall to get between your clients and server on your own LAN. ... >> mine setup so that my firewall makes the PPPoE connection to my ADSL ISP. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Reinstalling Terminal Server (ADMIN MODE) Windows 2003
    ... This Server is running Windows 2003 Server with SP1 with all critical ... The firewall is not enabled. ... Remote Desktop Disconnected ... I had tried installing "terminal Services" - multiuser at one point and I ...
    (microsoft.public.windows.terminal_services)
  • Re: Remote Access
    ... the firewall again then. ... How were you remotely accessing the server, ... There is no SSL remote management running on the firewall the only ... I am using a Netgear DGFV338. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Access
    ... My firewall is set up as ... Where 192.168.1.200 is the NIC of my SBS server. ... Companyweb and remote desktop don't. ... What is working in RWW: ...
    (microsoft.public.windows.server.sbs)
  • Re: Site VPN failed between Checkpoint AI R55 gateways
    ... My first rule allows any service from remote firewall to management ... > Local Managment server ... > First rule allows remote firewall to access management server (Service ...
    (comp.security.firewalls)