General discussion

  • Creator
    Topic
  • #2291101

    How do i open a port in SBS 2000

    Locked

    by amikucki ·

    The software I?m running is Microsoft Small Business Server 2000 with Exchange. What I need to do is initiate a TCP/IP connection to an outside server that is listening on port 3101. From my understanding I need to make sure that my firewall is configured to accommodate these types of outbound-initiated connections bi-directionally. So in a nutshell I need to open port 3101. Now I think you can do this by using a wizard in SBS 2000 called ?New IP Packet Filtering?, but I really have no clue where to go from here. Can anyone explain this to me and give me some type of detailed directions on how to go about this successfully without jeopardizing my network security? When I open this wizard there are a few different options but to me it?s all foreign. Can anyone offer some insight? Thank You!

All Comments

  • Author
    Replies
    • #3292686

      Reply To: How do i open a port in SBS 2000

      by bfilmfan ·

      In reply to How do i open a port in SBS 2000

    • #3293791

      Reply To: How do i open a port in SBS 2000

      by cg it ·

      In reply to How do i open a port in SBS 2000

      first question is, is ISA 2000 installed? SBS 2000 comes with ISA 2000 and unless you specifically exlude it during setup, its installed.

      Second, you don’t have ISA 2000 installed, just SBS2000 with Exchange, theres nothing blocking ports. SBS2000 without ISA 2000 is a naked system. Plug it in to the Internet and you are vunderable to exploit. However, you must run the ICS wizard to connect SBS2000 to the internet. you run this wizard from the SBS administrators console under IIS. Click on IIS in the left pane of the administrators console. In the right pane will appear an Icon to connect your SBS 2000 to the internet via the ICS Wizard.

      If your not referring to the above procedure, and are talking about TCP/IP filtering, that is configured at the NIC level. You can enable TCP/IP packet filtering on the NIC that is installed on the computer with SBS2000. You can enable packet filtering on a NIC in virtually all Windows O/S product line. Packet filtering on the NIC is off by default. Click start, navigate control panel, network connections. Right click the LAN connection and choose properties. Highlight Internet Protocol TCP/IP and click the properties radio button. With the properties page open, click on the advanced radio button. With the advanced properties page open, click on the options tab. This is where you enable TCP/IP filtering. you have to check the box to enable filtering which is off by default.

      Now, for SBS 2000,

    • #3311080

      Reply To: How do i open a port in SBS 2000

      by amikucki ·

      In reply to How do i open a port in SBS 2000

      The port connection that i need to makes is for a BlackBerry device… it’s not for a server on my network. I just want to now how to successfully open a port and then be able to check that it’s working properly.

    • #3293407
      • #3315761

        Reply To: How do i open a port in SBS 2000

        by amikucki ·

        In reply to Reply To: How do i open a port in SBS 2000

        I have SBS 2000 with ISA 2000 installed on it. And trying to establish a connection using the new IP packet filter wizard, but i’m not having any luck.

    • #3314933

      Reply To: How do i open a port in SBS 2000

      by cg it ·

      In reply to How do i open a port in SBS 2000

      your question was for Small Business Server 2000. Because its for Small Business Server 2000 that particular version comes with ISA server 2000. ISA server 2000 is a proxy server / firewall and if installed will block ALL ports unless specifically allowed. That is why I asked the question is ISA server 2000 installed.

      You do not open ports on Small Business Server without ISA server as there is nothing closing any ports. If you have a firewall that might close ports or ISA server 2000 will.

      Blackberry’s web site does have some information on connections via the web.

      • #3314932

        Reply To: How do i open a port in SBS 2000

        by cg it ·

        In reply to Reply To: How do i open a port in SBS 2000

        Since you have since said the blackberry device isn’t for your network, one must assume that the device will be installed on a computer not on the network. From there again, the question do you have a firewall must be asked? Again, I’ll direct you to the blackberry web site as they have specific requirements for using their products on a Windows O/S computer or Windows based network.

      • #3315764

        Reply To: How do i open a port in SBS 2000

        by amikucki ·

        In reply to Reply To: How do i open a port in SBS 2000

        Yes, ISA server 2000 is installled on this machine. This is what i have done so far but have had no luck, something is still blocking it.

        1. Click Start, and then click Small Business Server Administrator Console.
        2. In the Console Tree, expand Server and Arrays, and then i used the New IP Packet Filter Wizard.

        But no luck!

    • #3315688

      Reply To: How do i open a port in SBS 2000

      by cg it ·

      In reply to How do i open a port in SBS 2000

      ISA server 2000 on SBS 2000 has different levels for allowing communications. User level, program level, packet level, etc. The hiearchy is broad to narrow with user level being a broad level and packet filters/content filters being a very restrictive level. Just creating a packet filter alone will not automatically allow communications.

      If you already have internet access on SBS 2000 with ISA server 2000 e.g.run the SBS internet connection wizard then you must look at access policies, site and content rules, AND also the “applies to” properties. Normally if you install AD the AD domain users group is added to the applies to properties for site and content rules. If the user account that your trying to use is not a member of the administrators group or domain users group they will be denied access. even if you create a packet filter allowing communications. Ensure that the account you are trying to use is is listed in the “applies to” properties of the domain access rule in ISA server. If not, you can manually add that user or the group that user belongs to, to the “applies to” properties of the site/content rule governing SBS 2000, Or you can remove the domain users group and add in the everyone group. the everyone group will allow all in the domain internet access.

      Since you’ve created a packet filter for blackberry comm device, I’ll assume you have the correct port or range of ports that need to be open. If you have a firewall appliance in front of ISA server, you need [must] have port fowarding configured on the firewall to foward all inbound traffic over that port[s] to ISA servers external NIC ip address. If you don’t do this step, inbound traffic over those ports will be dropped by the firewall.

      • #3315686

        Reply To: How do i open a port in SBS 2000

        by cg it ·

        In reply to Reply To: How do i open a port in SBS 2000

        Next is don’t run the create a new packet filter from the administrators console in SBS 2000. click start, programs, ISA server and choose ISA management. you configure ISA server from the ISA mangement console. once in the ISA server management console, in the left pane, expand servers and arrays, expand your server name, navigate to Access Policy. Expand access policy and click on site and content rules. you should have a default rule. Click edit the default rule in the left pane and click on the “applies to” tab. Ensure that the domain users group is listed in the “applies to” section of the access policy rule.

        next expand packet filters. If you created a packet filter it will be listed here. Verify that the packet filter you created for the blackberry device is listed and that there are not red dots on the filter. A red dot signifies that the filter is not enbable. To enable the filter right click and from the menue choose enable.

      • #3315679

        Reply To: How do i open a port in SBS 2000

        by amikucki ·

        In reply to Reply To: How do i open a port in SBS 2000

        About your last comment: When i click on site and content rules, in the right pane displays 2 items. “Allow Rule” and “Back office internet access site and content rule”. Which one is my default rule and i don’t see the option to “edit default rule”.

        Also, the packet filter that i created doesn’t have a red dot on it. It’s enabled.

Viewing 5 reply threads