Windows Server

you know who maybe · Guest

I just got everything installed and patched per the getting started guide.
It seems to be working fine here on the LAN. But when I access it over the
internet it doesn't work by the dot com domain name. Why is this thing using
a non-routable domain like "companyweb" and not a dot com, for example?

Many thanks

Javier Gomez [SBS MVP] · Guest

You have to use the FQDN instead (the one you used for the SSL cert), not
companyweb. The URL should be:
https://hostname.domain.com:444

--
Javier [SBS MVP]
www.msmvps.com/javier
<< SBS ROCKS!!! >>

"you know who maybe" <kilbyfan@spammenotAOL.com> wrote in message
news:11mvlejgf9men23@news.supernews.com...

you know who maybe · Guest

OK, that worked... kinda. I was able to login but when I clicked on Remote
Mail it tried to find the server again using a non-FQDN of \\SBS1\Exchange.

But thanks for getting me closer!

"Javier Gomez [SBS MVP]" <javier_gomez@REMOVE.THIS.engineer.com> wrote in
message news:OBoZQ7%234FHA.1032@TK2MSFTNGP11.phx.gbl...

Jenny wu [MSFT] · Guest

Hi,

Thanks for posting here! Also thanks for Javier's input.

The Companyweb site by default can be access from LAN. If we want to access
it from internet, we need publish Sharepoint service to internet and open
related ports on the software firewall and the hardware firewall/router to
allow the traffic. All we need to do is that rerun CEICW wizard.

You can refer to the following steps:

1. Expand Standard Management | To Do List.
2. Click Connect to the Internet in the right pane.
3. Navigate the wizard to Firewall and then select Enable firewall. In the
next page, please check items you want to publish to internet service to
internet are checked in services configuration page.
4. Click Next and then select Allow access to the following web site
services from the internet.
5. Make sure "Windows Sharepoint Services intranet site" be selected and
click Next.
6. Click Create a new Web services certificate (input your FQDN as the web
server certificate) and then click Next.
7. Following the wizard to finish it.

I suggest you take a look at the KB 825763 to configure the network
connection:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

If you have installed router or hardware firewall outside the SBS 2003
network, please ensure you open the inbound and outbound 444 port and 443
port redirection on the hardware router or firewall. Check the
manufacturer's documentation for details on how to open ports of the device.

After did that, on the internet computer, type URL:http://FQDN or
URL:https://public IP:443 in IE to access the Companyweb site. Could you
access it now?

More information:

Generally, we open the ports we needed to allow some specific traffic. You
can refer to the following list:

TCP port Definition
25 Email (SMTP)
80 required for HTTP
requests for your site
443 required for HTTPS
requests using SSL, which secures communications from your server and a Web
browser
444 Companyweb
4125 Remote Web Workplace
1723 (plus GRE Protocol 47) VPN
3389 Terminal Services
21 FTP

Hope above information helps! I am happy to be assistance of you and look
forward to your reply!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

Javier Gomez [SBS MVP] · Guest

You mean the links inside the sharepoint site? If so, you need to change
them manually to the full FQDN (unfortunately depending on your router this
might break using them from inside... although it can be fixed).

The best option for accessing OWA/Sharepoint/etc is to use RWW anyway.

--
Javier [SBS MVP]
www.msmvps.com/javier
<< SBS ROCKS!!! >>

"you know who maybe" <kilbyfan@spammenotAOL.com> wrote in message
news:11n0f34g9010f15@news.supernews.com...

BFSmith · Guest

you can also VPN into your network (and make a HOSTS entry for companyweb)
and access it...

"you know who maybe" wrote:

you know who maybe · Guest

Hello Jenny,

I had a problem at Step 3. I'm using a Cisco PIX hardware firewall so I'm
not using two network cards, and hence no software firewall. Is this going
to be a problem? This is how we do our corporate servers at the office, and
so I'm doing a similar network setup for my home business with SBS.

Thanks,
-Bob

""Jenny wu [MSFT]"" <v-yanniw@online.microsoft.com> wrote in message
news:RWwyavC5FHA.3936@TK2MSFTNGXA01.phx.gbl...

you know who maybe · Guest

Oops. Answered my own question. I got it work without the software firewall.
I guess it couldn't hurt to add another card and have a software firewall,
too.If I did that I'd be twice as safe! Actually, I'd like to have a
firewall between the server and my inside users. Really, there is no reason
they should have all ports open to the server when they only need 3 or 4.

-Bob

"you know who maybe" <kilbyfan@spammenotAOL.com> wrote in message
news:11n1r9ip8ov9jd8@news.supernews.com...

Hollis D. Paul · Guest

In article <11n1rhdldos2t58@news.supernews.com>, You know who maybe wrote:

Jenny wu [MSFT] · Guest

Hi Bob,

Thanks for your update!

If there is only one NIC installed on the SBS server box, you can not
install ISA firewall on the server box. However the SBS server still
provides Windows basic firewall on the server box and client computers.

I think it is not the one NIC problem, I suggest you follow steps in my
previous post to Rerun CEICW to smooth the process.

It is strongly recommended that you take a look at the KB 825763 to get
more understanding about the CEICW wizard.

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Does the issue be fixed?

If the issue still persists, please help me collect some information to
isolate the issue:

1. Where you try to access the Companyweb site? Internet computer or
computer at your home( which is other domain computer)?
2. Please try to access it from some other internet computer, how about the
result?

I appreciate your time and effort to the issue. I am look forward to your
reply!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

you know who maybe · Guest

Hi Jenny,

Everything seems to be working OK now. As long as we access on port 444 we
get in OK. Unfortunately the sharepoint default sites which have the "Remote
mail" email link all use the server name UNC format which is not routable.

""Jenny wu [MSFT]"" <v-yanniw@online.microsoft.com> wrote in message
news:%23SSedlT5FHA.1236@TK2MSFTNGXA02.phx.gbl...

Jenny wu [MSFT] · Guest

Hi Bob,

Thanks for your update!

I got it! The Remote E-mail Access link will link to Outlook web Access
(OWA) site, so if you want to access OWA you need to publish E-mail
services and OWA to internet and open related ports (25, 80,443,444) on the
software firewall and the hardware firewall/router to allow the traffic.
All we need to do is that Rerun CEICW wizard.

I list a brief steps for your reference:

1. Expand Standard Management | To Do List.
2. Click Connect to the Internet in the right pane.
3. Navigate the wizard to Firewall and then select Enable firewall. In the
next page, make sure the E-mail item is checked in services configuration
page.
4. Click Next and then select Allow access to the following web site
services from the internet.
5. Make sure OWA, WSS be selected and click Next.
6. Following the wizard to finish it.

And also ensure you have opened 25, 80,443,444 ports on the router or
hardware firewall.

Try to test again, how about the result?

I am happy to be assistance of you and look forward to your reply!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

you know who maybe · Guest

Everything was done as you said but the team web site still has the link for
remote mail using the UNC naming convention. Maybe the team website needs to
be blown off and recreated so it realizes the new settings? FYI, OWA works
fine outside of the team web site where we use a FQDN.

Thanks

""Jenny wu [MSFT]"" <v-yanniw@online.microsoft.com> wrote in message
news:XI2SIwf5FHA.1236@TK2MSFTNGXA02.phx.gbl...

Javier Gomez [SBS MVP] · Guest

I'm sorry... but why not change the link manually? It will probably take
more time to display the companyweb than to change it. Click on Links->
select Edit on the Remote Email Access-> Change the URL to use the FQDN.
There's no mistery about it.

BTW-> This is the way its supposed to be, its not that something went wrong.
The links on Companyweb use the companyweb url. You *have* to change it
manually in order for them to work from outside (as I explained on my
previous post).

--
Javier [SBS MVP]
www.msmvps.com/javier
<< SBS ROCKS!!! >>

"you know who maybe" <kilbyfan@spammenotAOL.com> wrote in message
news:11n7089r39ija5b@news.supernews.com...

companyweb cannot route over internet Goto page 1, 2 Next