Security

Ask something
Discussion Locked

Proxy Server and Security

0 helpful
6 replies

by jmoody76

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We are running Small Business server 5 and running Microsoft proxy server on it. We are trying to set up some email software to send out newsletters. This software needs to connect to a DNS server as well as an Access database on the internal network. I can get this software to work if I put two network cards in a computer and have one connect to the internal network and connect directly to the internet bypassing the proxy server. This is probably not a good option. None of the computers on the inside can ping anything on the outside of the network and I believe this has to do with the proxy server but I have not had any experience with proxy servers. The server can ping the outside of the network just fine. I think if I can get one computer to be able to get to an external DNS server I will be able to get this software to work without bypassing the proxy server. Is there a way I can set up one computer up to be able to access a DNS server from within the network without creating a big security hole. Thanks for your help.

6 replies

by joseph moore

As long as your firewall setup allows inbound port 53 packets from your ISP's DNS servers, then yes, you can.
Just configure your client to use the DNS server IP addresses from your ISP. Most ISPs run DNS. So, just modify the IP properties on a network card on this machine to use the external DNS servers.
Internal machines do not HAVE to use internal DNS servers, as long as firewall rulesets allow inbound DNS requests.
hope this helps

by cg it

when you install Small Business Server, the default port for the default web site in IIS is port 80. Clients can not ping or reach the internet via IE because port 80 [default http port] is being used by the default web site. Change the IE setting for clients to use proxy server [putting in the name given for the SBS server] and port 8080 for http. Clients should be able to ping and reach the internet. Note: Small business server has an IIS connection manager wizard which will allow you to configure your WAN and LAN by each NIC, including using a router and/or gateway. to access the connection manger, start, SBS Administrator console. In the left pane, click on IIS manager. In the right pane click on "Manage Connections". This will pull upthe wizard. Just follow the instructions. another note: make sure the IP address [full range] for the external NIC isn't in the LAT.

by cg it

Since your running Small Business Server, it comes with ISA server. I suggest you install ISA server [not a bad firewall]. SBS also comes with Exchange 2000. Also not a bad email server.

This discussion is closed to new replies.