Re: Any Good white Papers on remote access

You can't have both cards in the same 192.168.1.x range. You need to take a
close look at your overall network configuration.

"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:eWt65xpBIHA.1204@xxxxxxxxxxxxxxxxxxxxxxx
Hi Costas

We have two network cards in sbs server the ipaddress on first network
cards is 192.168.1.1 the second network card ip address is 192.168.1.77
they go to a switch which also has firewall connected to it The internal
address of the firewall is 192.168.1.253 the external address is
81.86.61.86 does this help



Jason





"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:6C78D195-A8BA-475D-9A8B-1A9DAB1258B4@xxxxxxxxxxxxxxxx
Ok.. I'm still confused... sorry :)

Your server has two network cards...what is the IP address of the
external card? The firewall has an internal IP address... what is that
IP?

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:OGClBkpBIHA.3564@xxxxxxxxxxxxxxxxxxxxxxx
A firewall called netpliot the internal ip is 192.168.1.1 and the
external is 192.168.1.77

Jason



"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:09D15D46-A1A9-4617-8C9F-6737A372040E@xxxxxxxxxxxxxxxx
Port 4125 opens up on an as-needed basis. Something must be wrong in
the firewall configuration. What kind of firewall do you have? What is
its internal IP? What is the IP of the External NIC of the server?

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:OHYNHCpBIHA.3548@xxxxxxxxxxxxxxxxxxxxxxx
Sorry i have done that
Another thought could the rrs be corrupt somehow?
Can i disable it then re enable will this cause any probelms??
Silly question i ran netst -an i can't see port 4125 open but i have
followed all the instructions

should it say

tcp 192.168.1.1:4125 ??

Jason



"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:0511E3FF-3045-4351-9C47-3933AC69C20E@xxxxxxxxxxxxxxxx
Is the IP of the external NIC of your server 192.168.1.1 or is that
the IP of your router? (it seems like a router IP). If the external
NIC IP is, for example, 192.168.1.2, then in the router you should
open the 4215 and specify that IP as the destination

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:uBgo70oBIHA.2324@xxxxxxxxxxxxxxxxxxxxxxx

We have 2 nics on the server

The question do you port foward 4125 to the external NIC server How
do you do that???

All i did was open up the external firewall add port foward tcp 4125
to the server ip address e.i 192.168.1.1 do i have to do the same
then point it to the second ip address??

Jason




Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:94AD2598-63CF-4DA1-8A76-4EAC02B77CBA@xxxxxxxxxxxxxxxx
How many NICs on the server? If you can connect successfully using
the internal IP, the problem is not with the server, but with some
kind of firewall restrictions. If you have two NICS, do you port
forward 4125 to the external NIC of the server?

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:exh71soBIHA.4200@xxxxxxxxxxxxxxxxxxxxxxx
Hi Costas

Yeap i have try that as well I disable the LAN and connect to
outsider isp that try https:// external ip / remote with no joy Is
there are logfiles i can look @?

is it a problem with our external router??


Jason



"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:%23JJzIooBIHA.1212@xxxxxxxxxxxxxxxxxxxxxxx
When you run CEICW the port is opens for you on the server.
Since you opened port 4125 on the firewall and you forwarding to
the server, that should be ok as well. The other issue you might
have, is that you try to access RWW, using the external IP, from
within your network.

There are routers that do not allow that, so you'll have to
either remotely connect to an external computer and try to use
the external IP of your server, or be somewhere, outside your
network, to try it.

--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:eSRkcloBIHA.3548@xxxxxxxxxxxxxxxxxxxxxxx
Hi Costas

If i type https:// ipaddress / remote i can get to rthe rrw page

if i type https:// external ip / Remote i cet an error i got the
external ip address from www.whoismyip.com

yes i ran ceucw and did select the remote web workspace

yes i did open the port 4125 on your external firewall a
question does it have to be open on sbs2003 server? how do u do
that if so??

i don't understand whats happening i have followed all the books
on this to the letter

Cheers

Jason




"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:8CA1BDFC-1D77-4D49-A5EE-BD5298322273@xxxxxxxxxxxxxxxx
The MX record is not related to remote access but to the mail
server. We can talk about that later. For now, if I understand
correctly, you want to use RWW and you can't. When you type
https://IPAddress/Remote do you get an error and if yes, what
is that error? Did you run CEICW and did you select the Remote
Web Workspace service? Did you open port 4125 on your router
and it you forward it to the internal IP address of the server?

On a separate note, you need an A record at the ISP to point to
the external IPAddress of your server, so you can type
https://name.domain.com/remote instead of using the IP number.


--
Costas


"Jason" <Jason@xxxxxxxxxxx> wrote in message
news:eEmoxvmBIHA.4752@xxxxxxxxxxxxxxxxxxxxxxx
Hi

We trying to set up remote access for our users using https://
ipnumber/remote we can access the page we have enable remote
access from the server wizard we have allows our extend
firewall to let traffic in it just not working do we have to
set up a mx record?? to point @ our extend ip address

so we are going to start again with a good white paper

Cheers

Jason





















.

Relevant Pages

  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz2000)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.windows.server.sbs)
  • Re: need help re. office network install
    ... > and their network is a mess, the result of years of neglect. ... they have a gateway server w/ no special ... > firewall rules on it, they have a large DMZ that serves no purpose ... install anymore software on the firewall machine than is absolutely ...
    (comp.os.linux.networking)
  • Re: oops again
    ... open on the Firewall, and the default should be none. ... Since you intend to install IIS purely as a test server for your ASPX pages ... Make sure that IIS is only listening on the local network (192.168.x.y ...
    (microsoft.public.inetserver.iis)