Re: no external access and CEICW configuration error

Hi sbsstarter:

What is the edge firewall?

Since your mail is coming in, you did port 25 from the router to your SBS
correctly. Did you also do 443, 444, 4125? And if you want VPN 1723?

What type of "remote access" are you trying that does not work?

When running through the CEICW you need to tick the boxes to allow the type
of external access that you want. If in doubt, you could tick them all then
go back and untick any that seem unlikely to be used. The fewer ports open
the better. Best NOT to pick any that use port 80 or 20/21, (web site or
FTP)

As for the cert: If you have a public DNS record for you email, such as
"mail.yourdomain.com", and you must or your mail would not be flowing, use
that for the cert. Exactly that. mail.yourdomain.com. No more, no less.

Then from outside the lan you open you browser and type:

https://mail.yourdomain.com/remote

you should get a warning that the cert is not trusted. This is normal, you
can "go to that site anyway". Then you can install the cert on the remote
computer to end that warning.

Let us know.

And, welcome to SBS. Hope you enjoy it as much as the rest of us.

--
Larry


"sbsstarter" <sbsstarter@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C806312F-C989-43AB-978B-B6C4C09B13BE@xxxxxxxxxxxxxxxx
Just installed SBS R2. Running through the to-do list. Trying to configure
Internet connect and email. I am using two NIC's. One facing my edge
firewall
which is 192.168.13.2, and one serving the LAN clients 192.168.16.2.
Configured router connection DNS to my ISP's listed DNS servers and the
local
IP address of router to 192.168.13.1. Fowarded all ports I could think of
at
my edge firewall to port to the external of the SBS box - 192.168.13.2.
When
configuring a new web server certificate I entered the name of my
registered
subdomain name - sbs.mydomain.com. Then entered my registered mail domain
name of mail.mydomain.com. Everytime - I've done numerous times and tried
different settings, it puts a red x next to the item "secure website
configuration" and gives an error message.

Also, I can access all resources when I'm on the local network but when I
try to go from sbs.mydomain.com with either https or just http, I get
nothing. My email is getting through.


.

Relevant Pages

  • Re: moving sbs network
    ... The SBS network is connected to the LAN port. ... so the public wireless router is the DHCP ...
    (microsoft.public.windows.server.sbs)
  • Re: changed IP address: cant receive email & need to make domain name match IP address
    ... Port Forwarding for 2Wire 1701HG ... SBS CDs, but it's always a good idea to keep them handy. ... As you are set up now, your SBS server is "bare to the Internet" (not ... need to buy at least another inexpensive router to put between the SBS ...
    (microsoft.public.windows.server.sbs)
  • RE: router to router question...pls help
    ... that was done already all port are configured ... by the way i already have a full time router to router connection ... > I am glad to hear from you in the SBS newsgroup. ... > SBS 2003 to configure for the internet access and remote access. ...
    (microsoft.public.windows.server.sbs)
  • Re: Router problems
    ... Publish Web site on SBS 2003 ... Merv Porter [SBS MVP] ... >>I tried your suggestions but still was not able to get the port forwarding ... >> the router, but no one could access my webserver. ...
    (microsoft.public.windows.server.sbs)
  • Re: outgoing mail is ok, incoming does not work
    ... >> Assuming you have installed ISA on the SBS, I would configure your router to ... >> pass all incomming requests to the SBS external nic IP. ... Had a quick look in the router ... Forward Port 25 to the servers external NIC address? ...
    (microsoft.public.windows.server.sbs)