RWW works internally, not externally though

Discussion in 'Windows Small Business Server' started by Jack Ping, Jul 22, 2004.

  1. Jack Ping

    Jack Ping Guest

    Hi All,

    This afternoon, the IP address has been changed

    (We are running dynamic IP, SBS2K3 Pre, 2 nic, 1 router, We do not use
    dynamic DNS, instead, we use the IP directly for RWW)

    So we re-run CEICW with the new IP. But when we use "https://new ip
    address/remote" on any PC outside the company (externally), we got
    "the page can not be displayed, blah blah"
    But it works on all internal workstations.

    We have forworded 443 and 4125 in the router (actually, because RWW
    worked before, so we did not touch the router this time)

    This is weird

    Anyone can help??

    Thanks a lot

    Jack
     
    Jack Ping, Jul 22, 2004
    #1
    1. Advertisements

  2. Jack Ping

    Jack Ping Guest

    one hint that may help:
    I can not "telnet new_ip 443" externally
     
    Jack Ping, Jul 22, 2004
    #2
    1. Advertisements

  3. Hi Jack

    When you reran CEICW did you create a new Certificate for the New IP address
    and restart the server?

    Frank McCallister
    COMPUMAC
     
    Frank McCallister, Jul 22, 2004
    #3
  4. Hi Jack,

    If you can't telnet to your new IP, it is n't working yet. Does the new IP
    show up in www.dnsreport.com?
     
    Marina Roos [SBS-MVP], Jul 22, 2004
    #4
  5. Jack Ping

    Jack Ping Guest

    Hi Frank,

    I did create a new certificate for the new IP, but i did not restart
    server. I thought i do not have to.

    Thanks

    Jack
     
    Jack Ping, Jul 22, 2004
    #5
  6. Jack Ping

    Jack Ping Guest

    Hi Marina
    Don't quite understand why the new ip has anything to do with
    DNSReport .com

    We use ip to RWW, rather than the domain name
    (https://xx.xx.xx.xx/remote)

    Thanks

    Jack
     
    Jack Ping, Jul 22, 2004
    #6
  7. Hi Jack,

    It would just be to check. Depending on your ISP if they have created a DNS
    or MX record for it.
    If you can't telnet from outside your network to your IP, your router
    doesn't have the right ports opened up.
     
    Marina Roos [SBS-MVP], Jul 22, 2004
    #7
  8. Jack Ping

    Jack Ping Guest

    Thanks Marina.

    At first, I suspected the router, and i restarted the router a few
    times. But quickly i eliminate the router. This is because the router
    worked with the old ip for RWW. (I opened the ports 443 and 4125, and
    I did not touch the router since we got a new ip)

    Nothing has been changed except we got a new ip.

    I can not telnet the new ip (port 443), could this be related to ISA
    server? if so, any idea what settings should i check


    Thanks a lot

    Jack
     
    Jack Ping, Jul 22, 2004
    #8
  9. Hi Jack,

    Does the router have some kind of a webinterface in which you can see the
    actual WAN-IP?
     
    Marina Roos [SBS-MVP], Jul 22, 2004
    #9
  10. Jack Ping

    Jack Ping Guest

    Thanks Marina

    Yes, I can see the actual wan ip in the router's web interface. And,
    this wan ip is the one used to create Certificate in CEICW

    Jack
     
    Jack Ping, Jul 22, 2004
    #10
  11. Jack,

    If you have ISA on the box, you can't use IP address in the URL. You need
    to use whatever name you entered in the webserver name in CEICW and that
    name must be able to resolve to the IP address on your router. If you want
    to use IP address, then you must publish all websites in CEICW, but that
    exposes all your websites.

    So make sure you have a domain name registered and pointing to your external
    IP address: www.jackping.com points to 1.2.3.4. Then run CEICW and put in
    www.jackping.com as the certificate name for the webserver. Now from an
    external client you can use https://www.jackping.com/remote instead of
    https://1.2.3.4/remote.
     
    Matt Huynh [MSFT], Jul 22, 2004
    #11
  12. Jack Ping

    Jack Ping Guest

    Thanks Matthew

    1. why the previous ip worked with RWW?
    2. we are not hosting our web site on sbs

    Jack
     
    Jack Ping, Jul 22, 2004
    #12
  13. Matt,

    This is confusing. IP can be used in an URL. I do it all the time. And ISA
    is on the box.


    --
    Regards,

    Marina
    Microsoft SBS-MVP
     
    Marina Roos [SBS-MVP], Jul 22, 2004
    #13
  14. Hi Jack,

    Can you post your public IP? Or email me offline with it.
     
    Marina Roos [SBS-MVP], Jul 22, 2004
    #14
  15. Hi Matt

    That is not just confusing but incorrect. You can use IP address by one of
    two methods using ISA. Either create your certificate in CEICW usiung IP or
    create Destination sets in ISA for the IP Address if using FQDN in your
    Cert.

    Frank McCallister
    COMPUMAC
     
    Frank McCallister, Jul 23, 2004
    #15
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.