Re: CEICW Network Error

both NICs on SBS should get DNS from the 'internal' SBS NIC. The SBS DNS Server service can then be told to use the router (if it acts as DNS proxy) or your ISP's DNS Servers as forwarder(s) by submitting such during the CEICW (preferred) or manual adjustment, OR you can leave the DNS setting blank during CEICW and SBS DNS will resolve using 'root hints'.

"RickD" <support@xxxxxxxxxxxx> wrote in message news:e60Xw$R8IHA.1080@xxxxxxxxxxxxxxxxxxxxxxx
I have tried both iterations of the DNS on the WAN NIC tonight...good observation on your part.

Which should I set it to the SBS server 192.168.9.2 or the ISP supplied DNS servers?

Thanks


"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message news:OHTl75R8IHA.3724@xxxxxxxxxxxxxxxxxxxxxxx
The rules on SBS Standard _should_ be created during CEICW (when possible) and therefore should be available for enable/disable during the wiz. It is also possible to create rules directly in the RRAS console but I fear you may need to address your problem before this can be done.

1st I would correct the DNS settings, then run the CEICW and 'disable firewall' (DO NOT forget to re-enable, your Cisco router does not appear to be doing either NAT or port filtering), run the CEICW a 2nd time to re-enable the firewall.

A previous post has:
DNS Servers . . . . . . . . . . . : 167.206.112.138
167.206.7.4

yet you suggest:

the WAN(external) NIC has a public IP address and points to SBS 192.168.0.2
for DNS...

ba-bong. Something wrong there.

With Standard and a router controlled by the ISP I would put a second device (a true firewall) between the router and SBS and tell the ISP to forward everything to what _appears_ to be my server IP. With no ISA I'd probably run a single NIC.

"RickD" <support@xxxxxxxxxxxx> wrote in message news:OKt5SsR8IHA.3724@xxxxxxxxxxxxxxxxxxxxxxx
This is SBS 2K3 standard therefore no ISA...but aren't there port rules somewhere in the server console????

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message news:ut2G%23oR8IHA.1592@xxxxxxxxxxxxxxxxxxxxxxx
ISA or no ISA?

Either way they can be adjusted via CEICW for the most part but if you (or someone) have created rules manually in ISA then it's a trip through the ISA console.

"RickD" <support@xxxxxxxxxxxx> wrote in message news:uTHzmjR8IHA.2348@xxxxxxxxxxxxxxxxxxxxxxx
Tha was my original plan...to use a netgear wiireless router and allow visitors internet access outside of SBS, but Optimum insiosted that to have a static public IP I MUST use their Cisco....router...during installation and configuration by Optimum(remotely) I had them pass all traffic through to the router internal side (that has a public IP address) and I configured my Dual-NIC'd SBS 2K3 WAN NIC to a public IP.....as I said all was well until the (actually former) client brought is someone else and heaven knows what he tinkered with...

right now I am trying to put humpty dumpty back together again as it was and when I have completed that I will address the SPAM(the original problem) and any suggested re-configurations.

Please keep the suggestions and ideas comming as I re-install Symantec Endpoint 11.0....

Thanks sooooo much!

The other guy rtan CEICW a couple of times, and as I recall, CEICW disables any custom port filters..I am drawing a mental blank as to where to check those...ANYONE????

RickD

"Larry Struckmeyer [SBS-MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote in message news:%23M$qvbR8IHA.5164@xxxxxxxxxxxxxxxxxxxxxxx
Agreed on both counts. It is strange, and leave it alone. My comment was intended to give Rick additional info that he might be able to act on later. It is possible that the instructions were not clear from Optimum.

What would you and Rick think of even a consumer grade router between the nic and the Optimum device, which is more in line with what I was creeping up on.?

-Larry

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message news:umWKoTR8IHA.2064@xxxxxxxxxxxxxxxxxxxxxxx
I think Optimum (seen other posts about this ISP) does some strange things. If the ext. NIC hasn't been changed, probably best to leave it alone at this point.

--
Merv Porter [SBS-MVP]
============================


"Larry Struckmeyer [SBS-MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote in message news:%23a1HUQR8IHA.616@xxxxxxxxxxxxxxxxxxxxxxx
Hi Rick:

While we can't possibly know the ins and outs of every ISP and router on the planet, what you are describing sounds strange to me. Merv gave you a link to a diagram for the usual way this is done. The public IP goes on the Inet side of the router, and the SBS side of the router and the external NIC get a private IP address range that is different from the Internal SBS nic and the workstations.

It sounds to me like this device is not a router, but a DSL or Cable modem that sits at the termination point of the ISP connection to your office.

-Larry

"RickD" <support@xxxxxxxxxxxx> wrote in message news:eTY0x8Q8IHA.4928@xxxxxxxxxxxxxxxxxxxxxxx
the WAN(external) NIC has had a public IP address all along....and everything was working great....

the router was provided by Optimum Online and was needed (according to them) to facilitate a static IP for the External NIC

The end-user complained of large amounts of SPAM and that is why the purchased ESET, removed SEP and the whole thing went downhill from there.






"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message news:OtYMo2Q8IHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
I suspect someone reconfigured the external NIC and gave it a public address. Normally with a router in the mix, the router gets the public IP address on its WAN side and its LAN side is given a (static) private IP address in a subnet that is different from the Internal LAN. Then the external NIC is given a (static) private IP address in the same subnet as the router's LAN side.

SBS Two Nic configuration
(works with or without ISA)
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/articleId/76/Two-Nics-a-static-IP-address-ISA-router.aspx

--
Merv Porter [SBS-MVP]
============================

"RickD" <support@xxxxxxxxxxxx> wrote in message news:%231637xQ8IHA.1200@xxxxxxxxxxxxxxxxxxxxxxx

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message news:ea6ssoQ8IHA.1196@xxxxxxxxxxxxxxxxxxxxxxx
Hi Rick,

Please post results of an ipconfig /all for sbs server.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.AxxxxxxxE>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Axxxxxxx01
Primary Dns Suffix . . . . . . . : axxxxxxxe.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : axxxxxxxe.local

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-19-B9-FE-F2-8A
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.0.2
Primary WINS Server . . . . . . . : 192.168.0.2

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet
NIC #2
Physical Address. . . . . . . . . : 00-40-F4-70-7D-A5
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 96.nn.nn.250
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 167.206.112.138
167.206.7.4


Any errors in the event logs?

--
Merv Porter [SBS-MVP]
============================

"RickD" <support@xxxxxxxxxxxx> wrote in message news:OgckxfQ8IHA.2064@xxxxxxxxxxxxxxxxxxxxxxx
SBS 2K3 SP 2

Dual Nic

WAN public IP Address nnn.nnn.nnn.250
LAN 192.168.0.2

router with IP address nnn.nnn.nnn.249

Users brought in another tech and messed up internet connectivity....server had internet access, but AD desktops cannot get to internet.

NOW NEITHER server or desktops have internet access

I have reviewed both NICs, binding orders, services....etc...

When I run CEICW I get these errors in the error log:

Error 0c8007007e returned from call to installing RRAS (LAN)().
Error 0c8007007e returned from call to CNetCommit::Common().
Error 0c8007007e returned from call to CNetCommit::Common().
calling CRFireCommit::Commitex (0x2d93C0).
calling CRFireCommit::ValidatePropertyBag no RRAS NAT Public Interface, Basic Firewall will not be configured.().
Error 0x1 returned from call to CRFireCommit::CommitEx ValidatePropertyBag returned S_FALSE().


The whole problem started when the other tech tried to mUNINSTALL Symantec Endpoint 11.0 and then install ESET server and client.

Any H E L P is greatly appreciated...

TIA

RickD
























.

Relevant Pages

  • Re: Urgent! New router and big disaster
    ... NIC, you need to specify an external DNS server for DNS, instead of the ... Both NICs should point to his internal IP for DNS. ... forward ports to it reliably in the router. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Both NICs should point to his internal IP for DNS. ... forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW was working, but not since Sharepoint uninstall
    ... Merv hasn't accepted the distinction between a 'router' and a 'NAT router'. ... Two Nics, a static IP address, router ... Connection-specific DNS Suffix. ... calling CNetCommit::ValidateRouterConnectionProperties. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Les Connor [SBS Community Member - SBS MVP] ... No DNS Name Resolution If DHCP Client Service Is Not Running ... You have a full-time broadband connection. ... Next I Select a local router device with an ip address. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Both NICs should point to his internal IP for DNS. ... You should give your SBS a fixed external address so you can forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)