Networks

Ask something
Question Locked

RWW on SBS

0 helpful
6 replies

by mellow52

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have my first server (of any kind) up and running but can't seem to get RWW to kick in.

Here is what I have:
The Router is the firewall and SBS has DHCP and VPN on dynamic IP that ISP has not changed in months.

I ran the CIECW many times. I gave the certificate name as my DNS linked to my external IP. I get certificate warnings all the time? "This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store." That aside...

When I try to access my RWW from the internet via https://ip/remote or via my dynDNS (that points to the same IP) I get the login window for my router. I can then log into my router although I have remote management turned off!? Is it because I am really still local? I have not tried it from outside my office.
That aside...

SBS RWW is not "answering". Why?

6 replies

by churdoo

It's bizarre that your RV0 is answering if you say you have remote management turned off. What about HTTPS on the RV0, is that disabled too? And by your description, it sounds like you're forwarding individual ports to your SBS box rather than DMZ'ing the SBS box.

This article lists the ports to forward for the different SBS functionality (for RWW, you want 4125 and 443)
http://www.microsoft.com/technet/prodtechnol/sbs/2003/plan/gsg/appx_c.mspx

by mellow52

OK I tried it from outside the office and the RV0 did not answer with login... thank goodness. I am just forwarding the VPN port 1723 and see I also have to do 4125 and 443.

HTTPS on RV0 is enabled.

I see the 443 as a HTTPS preset so chose that but no preset for 4125. Not sure what to create it as, HTTP, HTTPS or one of the many others?

Any security issue opening all these ports?

by churdoo

... and add HTTPS to the forwards to your SBS box

To add the forward of port 4125, you'll first have to define it on the RV0 in "Service Management" I think they call it, accessible from the port forwarding page.

Name it whatever you want, like RWW or RWW4125, and associate it with TCP/4125, save the settings, then it will appear on the dropdown of ports/services that you can forward to your SBS IP.

Make sense?

As for security risk? Sure there's a certain amount of risk with any exposure, but by forwarding individual ports that were designed for a specific purpose rather than DMZ'ing the whole box, the risk is hopefully controlled and minimized.

Speaking of ... with RWW, the importance of good password policies is paramount -- not just from joe hacker living in mom's basement drinking a gallon of red bull per day, but also from the potentially disgruntled employee that was just fired and knows the URL for RWW and knows that Lizzy's password in accounting is "astro" (her dog or maybe her boyfriend's name).

by mellow52

Yes it is all starting to make perfect sense now. Did all you said

getting this error when i try to get to the RWW (see below). So where is the list of "legal" IP's I must add to?

You are not authorized to view this page
The Web server you are attempting to reach has a list of IP addresses that are not allowed to access the Web site, and the IP address of your browsing computer is on this list.
--------------------------------------------------------------------------------

Please try the following:

Contact the Web site administrator if you believe you should be able to view this directory or page.
HTTP Error 403.6 - Forbidden: IP address of the client has been rejected.
Internet Information Services (IIS)

by mellow52

I left off the /remote and so that fixed that IP error.

So I know about
/remote
/exchange

is there any more? greedy I know ;o)

This discussion is closed to new replies.