Re: Any Good white Papers on remote access

Hi Costas

We have two network cards in sbs server the ipaddress on first network cards
is 192.168.1.1 the second network card ip address is 192.168.1.77 they go to
a switch which also has firewall connected to it The internal address of the
firewall is 192.168.1.253 the external address is 81.86.61.86 does this help



Jason





"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:6C78D195-A8BA-475D-9A8B-1A9DAB1258B4@xxxxxxxxxxxxxxxx
Ok.. I'm still confused... sorry :)

Your server has two network cards...what is the IP address of the external
card? The firewall has an internal IP address... what is that IP?

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:OGClBkpBIHA.3564@xxxxxxxxxxxxxxxxxxxxxxx
A firewall called netpliot the internal ip is 192.168.1.1 and the
external is 192.168.1.77

Jason



"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:09D15D46-A1A9-4617-8C9F-6737A372040E@xxxxxxxxxxxxxxxx
Port 4125 opens up on an as-needed basis. Something must be wrong in
the firewall configuration. What kind of firewall do you have? What is
its internal IP? What is the IP of the External NIC of the server?

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:OHYNHCpBIHA.3548@xxxxxxxxxxxxxxxxxxxxxxx
Sorry i have done that
Another thought could the rrs be corrupt somehow?
Can i disable it then re enable will this cause any probelms??
Silly question i ran netst -an i can't see port 4125 open but i have
followed all the instructions

should it say

tcp 192.168.1.1:4125 ??

Jason



"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:0511E3FF-3045-4351-9C47-3933AC69C20E@xxxxxxxxxxxxxxxx
Is the IP of the external NIC of your server 192.168.1.1 or is that
the IP of your router? (it seems like a router IP). If the external
NIC IP is, for example, 192.168.1.2, then in the router you should
open the 4215 and specify that IP as the destination

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:uBgo70oBIHA.2324@xxxxxxxxxxxxxxxxxxxxxxx

We have 2 nics on the server

The question do you port foward 4125 to the external NIC server How
do you do that???

All i did was open up the external firewall add port foward tcp 4125
to the server ip address e.i 192.168.1.1 do i have to do the same
then point it to the second ip address??

Jason




Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:94AD2598-63CF-4DA1-8A76-4EAC02B77CBA@xxxxxxxxxxxxxxxx
How many NICs on the server? If you can connect successfully using
the internal IP, the problem is not with the server, but with some
kind of firewall restrictions. If you have two NICS, do you port
forward 4125 to the external NIC of the server?

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:exh71soBIHA.4200@xxxxxxxxxxxxxxxxxxxxxxx
Hi Costas

Yeap i have try that as well I disable the LAN and connect to
outsider isp that try https:// external ip / remote with no joy Is
there are logfiles i can look @?

is it a problem with our external router??


Jason



"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:%23JJzIooBIHA.1212@xxxxxxxxxxxxxxxxxxxxxxx
When you run CEICW the port is opens for you on the server. Since
you opened port 4125 on the firewall and you forwarding to the
server, that should be ok as well. The other issue you might
have, is that you try to access RWW, using the external IP, from
within your network.

There are routers that do not allow that, so you'll have to either
remotely connect to an external computer and try to use the
external IP of your server, or be somewhere, outside your network,
to try it.

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:eSRkcloBIHA.3548@xxxxxxxxxxxxxxxxxxxxxxx
Hi Costas

If i type https:// ipaddress / remote i can get to rthe rrw page

if i type https:// external ip / Remote i cet an error i got the
external ip address from www.whoismyip.com

yes i ran ceucw and did select the remote web workspace

yes i did open the port 4125 on your external firewall a question
does it have to be open on sbs2003 server? how do u do that if
so??

i don't understand whats happening i have followed all the books
on this to the letter

Cheers

Jason




"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:8CA1BDFC-1D77-4D49-A5EE-BD5298322273@xxxxxxxxxxxxxxxx
The MX record is not related to remote access but to the mail
server. We can talk about that later. For now, if I understand
correctly, you want to use RWW and you can't. When you type
https://IPAddress/Remote do you get an error and if yes, what is
that error? Did you run CEICW and did you select the Remote Web
Workspace service? Did you open port 4125 on your router and it
you forward it to the internal IP address of the server?

On a separate note, you need an A record at the ISP to point to
the external IPAddress of your server, so you can type
https://name.domain.com/remote instead of using the IP number.


--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:eEmoxvmBIHA.4752@xxxxxxxxxxxxxxxxxxxxxxx
Hi

We trying to set up remote access for our users using https://
ipnumber/remote we can access the page we have enable remote
access from the server wizard we have allows our extend
firewall to let traffic in it just not working do we have to
set up a mx record?? to point @ our extend ip address

so we are going to start again with a good white paper

Cheers

Jason



















.

Relevant Pages

  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Maintain an IIS Server?
    ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Activesync / Airsync - Alternative Ports
    ... Setup a reverse HTTP proxy. ... Another idea is to use the PPTP capabilities of a Windows Server to allow ... Satellite - Cisco Firewall - Exchange Server ... So on the server side you would configure the port 80 to redirect to ...
    (microsoft.public.pocketpc.activesync)
  • Re: Activesync / Airsync - Alternative Ports
    ... "Chris De Herrera" wrote: ... Another idea is to use the PPTP capabilities of a Windows Server to allow ... Satellite - Cisco Firewall - Exchange Server ... So on the server side you would configure the port 80 to redirect to 8888 ...
    (microsoft.public.pocketpc.activesync)
Loading