Problems setting up IIS

[kwinsw]

Hi,

I wonder if anyone cal help. I have just installed SBS 2003 and am trying to configure IIS to allow external users access to our default company website.

I just can’t get it to work. Users on the local network can access the site, but not users outside the firewall. The server has two network cards, one for the local connection one for connecting to ISP.

Configuration is as follows:

IIS

Description: Default Web Site
IP Address: (All Unassigned)
TCP Port: 80
SSL port: 443
Home directory: c:\inetpub\

http://wwwroot

Enable default content page (ticked): Default.htm

ISA

I used the “Publish a web server” wizard to create a new policy called “web server”. The details are:

From: anywhere
To: Domaincontroller.Domain.local
Public name: https:\\public ip address of server
Traffic: HTTP, HTTPS
Listener: SBS Web listener (default settings)

If I try to connect from a PC outside the network I get the error “The page cannot be displayed”. Checking the firewall log reveals the following:

First this:

Initiated Connection SERVER 3/29/2008 4:26:43 PM
Log type: Firewall service
Status: The operation completed successfully.
Rule:
Source: External
Destination: Local Host
Protocol: HTTP
User:
Additional information

Followed closely by:

Closed Connection SERVER 3/29/2008 4:26:43 PM
Log type: Firewall service
Status: A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.
Rule:
Source: External
Destination: Local Host
Protocol: HTTP
User:
Additional information

If anyone can help I’d be very grateful.

Thanks

Karl

 

[mofusjtf]

Did you do your IIS/ISA config manually or did you let the ICW do it? I suggest running the ICW and telling it you want to publish the entire site. I can't reember specifically but you need a high range port open for RWW but SBS ICW should properly configure ISA for you.

 

[noveyron]

Dont forget that they have to go to ip/remote rather than the IP/name

SBS firewall ports here:

http://www.howtonetworking.com/sbs/rwwports.htm

 

[noveyron]

er, that should read IP OR name rather than ip/name, above.