IIS on XP / Security of inbound web connections

[Stevehewitt]

Hi guys,

Got a slight problem. Got a tiny web app on a XP Pro wks. I need to allow access for a couple of people to view this. The firewall will forward port 80 requests to my local IP. From another workstation in the workgroup (not behind a firewall) there is no problem connecting.

But when trying from a external client outside of the firewall the request times out.

Running XP Pro SP2 but WinFirewall is Off.

Firewall logs shows that the external request is being processed and passed to my workstation.

Any ideas?!

Cheers,

Steve.

 

[aquias]

First thing I would check out is to ensure that you don't have an ICF firewall running as well (this has bit me once or twice). Check under Network Neighborhood properties and verify this.

Next up, see if you have anything in the Event Viewer. If you're dropping a connection you may get a hit here.

Another thing to check up on, is the firewall letting the request back out? You could be reaching your machine and then having the firewall block the returning connection.

I'm no IIS expert so I'm certain some other people have more constructive answers but I'd start there (and can I mention it's way to early for me to be up).

 

[Stevehewitt]

Thanks Aquias,

ICF is already off as I'm running XP SP2 which removes ICF and puts in 'Windows Firewall' which I have already turned off.

Actually I think I've managed to crack it. Seems to running OK at the moment. Seems it was the app. (ASP)

You need to enter in the IP of the server, which I had as locally. Now that I've changed the IP in the app to the external IP it seems to work OK.

The problem is that I need the users on the internal network to be able to use it to!!!! :-(

Thanks for your help anyway,

Cheers,


Steve.

 

[aquias]

Eh, depends on the system and what's on it. I have a system with a dialer on it that installed a third party ICF, so I always toss that out there.

As to the app...depending on your network setup internal users should still be able to see and ping, external IP's. Albeit, this is a round trip that you really don't want to send them on (more traffic, longer ping times, etc...) but it should still work.