Re: RWW 403 forbidden error

Is port 4125 corrected forwarded in the router to the IP address of the SBS
NIC?

--
Merv Porter [SBS-MVP]
============================

"BobS" <BobS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6B023657-EAF6-4E91-9C1F-182E999B4CCD@xxxxxxxxxxxxxxxx
Thanks Merv,

Those are the settings I have. It is a single NIC system.
--
Bob Showalter
Packer International


"Merv Porter [SBS-MVP]" wrote:

Directory Security settings... (on a two NIC system, if that matters)

IIS | <yourserver> | Web Sites | Default Web Site | Properties |
Directory
Security | IP Address and Domain Name Restrictions | Edit...

Settings should be Denied Access;
Except the Following: Granted 192.168.16.2 (255.255.255.0)
Except the Following: Granted 127.0.0.1

IIS | <yourserver> | Web Sites | Default Web Site | Remote| Properties |
Directory Security | IP Address and Domain Name Restrictions | Edit...

Granted Access

--
Merv Porter [SBS-MVP]
============================

"BobS" <BobS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:350FE9EE-EC90-4F57-87AB-45BE4B72CB2B@xxxxxxxxxxxxxxxx
Merv, thanks for continuing to try. No luck yet. Here is what I did
with
your last set of suggestions:
1. I reran CEICW removing RWW (and all other website services, OWA and
SharePoint). Rebooted. Ran it again enabling those 3 sdervices.
Rebooted.
It made no difference. You mentioned enabling the firewall, but with
only
one NIC, firewal is external. However, when it rebuilt, in going
through
the
steps, when it came to "Configuring the firewall" it said that it
failed,
even though it gave the normal warning that with only one NIC it could
not
install a firewall. I ran it a second time and it did not give that
warning
and went right past the firewall stage with a green check. Still
though
no
access through RWW.

2. Checked Issue 6 of the referenced BLOG which seemed to be a lesser
reiteration of step one above so didn't try it again.

3. The RWW virtual directory seems to be installed under the default
website in ISS Mgr if it is the one called "Remote" (we are getting
dangerously close to the limits of my knowledge here). I couldn't say
if
it
is all in tact. What I did check was that if I looked at the Directory
Security and it is set to Grant Access to all IP's. I did take notice
that
during step one above, that security changed to deny all except the
server
IP. When I wen back to enabling RWW it changed to Grant Access.

4. Using https://.... makes no difference.

5. Not really sure where to check the binding of the NICs. I remember
that
from NT, but haven't had the need to look at it since.

I will give one other piece of history on the issue. When the problem
was
first brought to my attention a few days after the migration was
"complete",
I spent several days trying things. I managed to get the server to the
point
that the network did not work at all, and people could not log on or
connect
to shared drives. I could not seem to get things back to working, so
put
in
the SBS DVD, and either reinstalled all features except Excfthange (or
uninstalled and installed, I can't remember which). After that, I was
back
to the place I am now with everything working on the system except RWW.

One other note that I don't know if it is of any consequence for my
problem
is that very often (perhaps always, I don't know) one of the exchange
services does not start when restarting the system and I have to go to
the
Services snap-in and start it manually, even though it is set to
automatic.

Thanks for the patience. I will wait for other input as I continue to
research also.


--
Bob Showalter
Packer International


"Merv Porter [SBS-MVP]" wrote:

Maybe something to try...

Re-run CEICW, enable the firewall and uncheck Remote Web Workplace,
complete
the rest of CEICW. Reboot server, then re-run CEICW again, this time
enabling RWW.

see issue No.6 here
http://msmvps.com/blogs/bradley/archive/2006/02/12/83381.aspx

Is the RWW virtual web site actually installed under the Default web
site
(all files intact)?
Binding order of NICs OK?
Does using https://<IP_address>/remote allow RWW access?

--
Merv Porter [SBS-MVP]
============================


"BobS" <BobS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:287F53B3-38EC-4D40-AEDB-E576595E258E@xxxxxxxxxxxxxxxx
Again, thanks for the reply. Hmmmm is not what I had hoped for, but
I
understand. I have done this before for many clients without a
hickup.
I
tried resyncing the IWAM and IUSR passwords as suggested by Jeff
Middleton;
I have looked at many of the other posts on the newsgroup. I see
one
that
looks interesting but need further confirmation before doing it.
There
are
posts that suggest goinging to the Default Web Site properties in
IIS
Mgr
and
on the Directory Security tab, granting access to all IP addresses.
Logically it makes sense, but when I look at some of my other
servers,
it
says Deny access except for the server IP and 127.0.0.1. so if that
works
on
my server, why would it need to be different on another server if
connecting
from the same workstation.

I looked at the link you sent and the solution seemed to be that the
workstation that was trying to connect was doing through a proxy.
That
is
not the case her.

I will look forward to any and all suggestions to resolve this
issue.

Thanks
--
Bob Showalter
Packer International


"Merv Porter [SBS-MVP]" wrote:

Hmmm...

Any help here?

HTTP Error 403.6 - Forbidden: IP Address Rejected
http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/9a62b95a17c165d1/1889a4b367b0da51?hl=en&lnk=st&q=garry+HTTP+Error+403.6+-+Forbidden%3A+IP+Address+Rejected#1889a4b367b0da51

--
Merv Porter [SBS-MVP]
============================

"BobS" <BobS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FC5F485D-5AA4-4BAC-848E-D2D526B99582@xxxxxxxxxxxxxxxx
Thanks for the reply Merv; Yes, I have rerun it a couple of times
to
no
avail. Everything is still just the same.

--
Bob Showalter
Packer International


"Merv Porter [SBS-MVP]" wrote:

Have you tried re-running the CEICW (Configure Email and
Internet
Connection
Wizard)?

--
Merv Porter [SBS-MVP]
============================

"BobS" <BobS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:22E8B4BB-7DB3-497B-A8F1-BE1A03AE7E4D@xxxxxxxxxxxxxxxx
I recently moved a clients SBS 2003 domain to a new server
doing a
Swing
migration. Everything works just great except no one can
access
the
domain
through RWW from the outside. It worked on the old server.
It
works
at
all
of my other clients and I have done nothing different in the
setup
(that I
know of). I have an A record pointing to the domain that is
rww.domainname.com. I have a certificate with the same A
record
name
generated (all the same as I do at my other accounts). But
when
trying
to
connect using http://rww.domainname.com/remote, I get the
normal
certificate
warning and after I accept it, I get the error. (The site has
been
reached,
but your IP has been rejected or something like that).

The IP for the server is the same as it was before, and I
checked
the
firewall to see that all of the necessary ports are forwarded
correctly.

OWA works just fine.

Any and all suggestions would be greatly appreciated.

Bob Showalter
--
Bob Showalter
Packer International














.

Relevant Pages

  • Re: Upgrade from SBS2K to SBS2k3 R2
    ... Merv Porter [SBS-MVP] ... seems ok now except my POP3 connector failed to install... ... Dell server, ...
    (microsoft.public.windows.server.sbs)
  • Re: Password Problem - Server
    ... Merv Porter [SBS-MVP] ... believe a corrupt AD is going to give you some kind of warning (errors ... reinstall of the entire server. ...
    (microsoft.public.windows.server.sbs)
  • Re: take 2 on crypt32 error
    ... Merv Porter [SBS-MVP] ... Connection-specific DNS Suffix. ... Can you post an ipconfig /all for the server? ...
    (microsoft.public.windows.server.sbs)
  • Re: remove exchange
    ... Merv Porter [SBS-MVP] ... be upgrade to the OEM verison of WINDOWS SMALL BUSINESS SERVER" shows up. ... I'm wondering if SBS was not installed properly? ...
    (microsoft.public.windows.server.sbs)
  • Re: Still not routing!! Help Please!!
    ... can you post an IP config all from your server??? ... "CRIS HANNA (SBS-MVP)" wrote in ... > Should I enter a static route between Inside and Outside NICs? ...
    (microsoft.public.windows.server.sbs)
Loading