Re: CEICW Network Error

Both LAN and WAN point to 192.168.0.2 for DNS and in CEICW I identify the
ISP DNS servers and have confirmed that they are the forwarders in the DNS
console


"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:OfKfcFS8IHA.3480@xxxxxxxxxxxxxxxxxxxxxxx
both NICs on SBS should get DNS from the 'internal' SBS NIC. The SBS DNS
Server service can then be told to use the router (if it acts as DNS
proxy) or your ISP's DNS Servers as forwarder(s) by submitting such during
the CEICW (preferred) or manual adjustment, OR you can leave the DNS
setting blank during CEICW and SBS DNS will resolve using 'root hints'.

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:e60Xw$R8IHA.1080@xxxxxxxxxxxxxxxxxxxxxxx
I have tried both iterations of the DNS on the WAN NIC tonight...good
observation on your part.

Which should I set it to the SBS server 192.168.9.2 or the ISP supplied
DNS servers?

Thanks


"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:OHTl75R8IHA.3724@xxxxxxxxxxxxxxxxxxxxxxx
The rules on SBS Standard _should_ be created during CEICW (when
possible) and therefore should be available for enable/disable during
the wiz. It is also possible to create rules directly in the RRAS
console but I fear you may need to address your problem before this can
be done.

1st I would correct the DNS settings, then run the CEICW and 'disable
firewall' (DO NOT forget to re-enable, your Cisco router does not appear
to be doing either NAT or port filtering), run the CEICW a 2nd time to
re-enable the firewall.

A previous post has:
DNS Servers . . . . . . . . . . . : 167.206.112.138
167.206.7.4

yet you suggest:

the WAN(external) NIC has a public IP address and points to SBS
192.168.0.2
for DNS...

ba-bong. Something wrong there.

With Standard and a router controlled by the ISP I would put a second
device (a true firewall) between the router and SBS and tell the ISP to
forward everything to what _appears_ to be my server IP. With no ISA I'd
probably run a single NIC.

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:OKt5SsR8IHA.3724@xxxxxxxxxxxxxxxxxxxxxxx
This is SBS 2K3 standard therefore no ISA...but aren't there port rules
somewhere in the server console????

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:ut2G%23oR8IHA.1592@xxxxxxxxxxxxxxxxxxxxxxx
ISA or no ISA?

Either way they can be adjusted via CEICW for the most part but if you
(or someone) have created rules manually in ISA then it's a trip
through the ISA console.

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:uTHzmjR8IHA.2348@xxxxxxxxxxxxxxxxxxxxxxx
Tha was my original plan...to use a netgear wiireless router and
allow visitors internet access outside of SBS, but Optimum insiosted
that to have a static public IP I MUST use their
Cisco....router...during installation and configuration by
Optimum(remotely) I had them pass all traffic through to the router
internal side (that has a public IP address) and I configured my
Dual-NIC'd SBS 2K3 WAN NIC to a public IP.....as I said all was well
until the (actually former) client brought is someone else and heaven
knows what he tinkered with...

right now I am trying to put humpty dumpty back together again as it
was and when I have completed that I will address the SPAM(the
original problem) and any suggested re-configurations.

Please keep the suggestions and ideas comming as I re-install
Symantec Endpoint 11.0....

Thanks sooooo much!

The other guy rtan CEICW a couple of times, and as I recall, CEICW
disables any custom port filters..I am drawing a mental blank as to
where to check those...ANYONE????

RickD

"Larry Struckmeyer [SBS-MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote in
message news:%23M$qvbR8IHA.5164@xxxxxxxxxxxxxxxxxxxxxxx
Agreed on both counts. It is strange, and leave it alone. My
comment was intended to give Rick additional info that he might be
able to act on later. It is possible that the instructions were not
clear from Optimum.

What would you and Rick think of even a consumer grade router
between the nic and the Optimum device, which is more in line with
what I was creeping up on.?

-Larry

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:umWKoTR8IHA.2064@xxxxxxxxxxxxxxxxxxxxxxx
I think Optimum (seen other posts about this ISP) does some strange
things. If the ext. NIC hasn't been changed, probably best to leave
it alone at this point.

--
Merv Porter [SBS-MVP]
============================


"Larry Struckmeyer [SBS-MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote
in message news:%23a1HUQR8IHA.616@xxxxxxxxxxxxxxxxxxxxxxx
Hi Rick:

While we can't possibly know the ins and outs of every ISP and
router on the planet, what you are describing sounds strange to
me. Merv gave you a link to a diagram for the usual way this is
done. The public IP goes on the Inet side of the router, and the
SBS side of the router and the external NIC get a private IP
address range that is different from the Internal SBS nic and the
workstations.

It sounds to me like this device is not a router, but a DSL or
Cable modem that sits at the termination point of the ISP
connection to your office.

-Larry

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:eTY0x8Q8IHA.4928@xxxxxxxxxxxxxxxxxxxxxxx
the WAN(external) NIC has had a public IP address all
along....and everything was working great....

the router was provided by Optimum Online and was needed
(according to them) to facilitate a static IP for the External
NIC

The end-user complained of large amounts of SPAM and that is why
the purchased ESET, removed SEP and the whole thing went downhill
from there.






"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:OtYMo2Q8IHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
I suspect someone reconfigured the external NIC and gave it a
public address. Normally with a router in the mix, the router
gets the public IP address on its WAN side and its LAN side is
given a (static) private IP address in a subnet that is different
from the Internal LAN. Then the external NIC is given a (static)
private IP address in the same subnet as the router's LAN side.

SBS Two Nic configuration
(works with or without ISA)
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/articleId/76/Two-Nics-a-static-IP-address-ISA-router.aspx

--
Merv Porter [SBS-MVP]
============================

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:%231637xQ8IHA.1200@xxxxxxxxxxxxxxxxxxxxxxx

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:ea6ssoQ8IHA.1196@xxxxxxxxxxxxxxxxxxxxxxx
Hi Rick,

Please post results of an ipconfig /all for sbs server.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.AxxxxxxxE>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Axxxxxxx01
Primary Dns Suffix . . . . . . . : axxxxxxxe.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : axxxxxxxe.local

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme
Gigabit Ethernet
Physical Address. . . . . . . . . : 00-19-B9-FE-F2-8A
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.0.2
Primary WINS Server . . . . . . . : 192.168.0.2

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139 Family
PCI Fast Ethernet
NIC #2
Physical Address. . . . . . . . . : 00-40-F4-70-7D-A5
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 96.nn.nn.250
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 167.206.112.138
167.206.7.4


Any errors in the event logs?

--
Merv Porter [SBS-MVP]
============================

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:OgckxfQ8IHA.2064@xxxxxxxxxxxxxxxxxxxxxxx
SBS 2K3 SP 2

Dual Nic

WAN public IP Address nnn.nnn.nnn.250
LAN 192.168.0.2

router with IP address nnn.nnn.nnn.249

Users brought in another tech and messed up internet
connectivity....server had internet access, but AD desktops
cannot get to internet.

NOW NEITHER server or desktops have internet access

I have reviewed both NICs, binding orders, services....etc...

When I run CEICW I get these errors in the error log:

Error 0c8007007e returned from call to installing RRAS
(LAN)().
Error 0c8007007e returned from call to CNetCommit::Common().
Error 0c8007007e returned from call to CNetCommit::Common().
calling CRFireCommit::Commitex (0x2d93C0).
calling CRFireCommit::ValidatePropertyBag no RRAS NAT Public
Interface, Basic Firewall will not be configured.().
Error 0x1 returned from call to CRFireCommit::CommitEx
ValidatePropertyBag returned S_FALSE().


The whole problem started when the other tech tried to
mUNINSTALL Symantec Endpoint 11.0 and then install ESET
server and client.

Any H E L P is greatly appreciated...

TIA

RickD


























.

Relevant Pages

  • Re: Cannot connect to RWW from home PC
    ... eth0 172.26.0.1/16 Extra none ... That would be the address you need a DNS record for. ... One question - if I reset the Thomson Router will that clear all the ... Heres' the info for our server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot connect to RWW from home PC
    ... No 10.0.0.138 is the address used to log onto Thomson's router to make the ... On the DNS question I can add an MX record in the DNS area of GoDaddy's ... eth0 172.26.0.1/16 Extra none ... Heres' the info for our server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... NIC, you need to specify an external DNS server for DNS, instead of the ... Both NICs should point to his internal IP for DNS. ... forward ports to it reliably in the router. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot connect to RWW from home PC
    ... You say "And in the router you need to forward to your external nic IP" ... You say "You need the domain hoster to setup a DNS record that will be ... We have rerun CEICW sort of hoping it would sort out the router but no ... Heres' the info for our server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Even a single-NIC configuration should have ONLY the LAN IP of the server as ... Then you can run the CEICW or use the DNS console to enter ... forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)
Loading