Windows Server - Internet for clients

Asked By Poodl

05-Sep-07 09:34 AM

I had a problem with ISA 2004 blocking out everything in my network
yesterday. It blocked out the ADSL modem and clients on the network.
I have since removed it (ISA) from the server and clients can conect to the
server and print through the server and receive their emails through exchange.

The server has internet access, but the clients cant get it.

After removing ISA from the server, I changed the proxy server settings on
the clients to port 80, stil nothing. I removed the proxy server settings on
the clients all together, still nothing.

The clients are all wireless and conect through a wireles 4 port router that
that is also hooked up to the switch.

What could be the problem..?

05-Sep-07 10:04 AM

How many NICs do you have in the server?

05-Sep-07 10:18 AM

I have 2 NICs.

05-Sep-07 10:23 AM

OK - I'd be tempted to install ISA again and run the ICW. Run an ipconfig
/all on the server and post the results before you start though.

Robbie

05-Sep-07 10:42 AM

Ive ran the ipconfig/all and am not sure how to copy and paste it here..

05-Sep-07 10:48 AM

Type ipconfig /all > C:\ipconfig.txt

Locate the file, open it and copy and paste contents into a post.

Thanks

05-Sep-07 10:58 AM

Windows IP Configuration



Host Name . . . . . . . . . . . . : MONGKHUMOSBS01

Primary Dns Suffix  . . . . . . . : MONGKHUMO.local

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : Yes

WINS Proxy Enabled. . . . . . . . : Yes

DNS Suffix Search List. . . . . . : MONGKHUMO.local



Ethernet adapter LAN:



Connection-specific DNS Suffix  . :

Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigabit
Ethernet NIC

Physical Address. . . . . . . . . : 00-08-A1-99-00-17

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.2.6

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

DNS Servers . . . . . . . . . . . : 192.168.2.6

NetBIOS over Tcpip. . . . . . . . : Disabled



Ethernet adapter Internet:



Connection-specific DNS Suffix  . :

Description . . . . . . . . . . . : Marvell Yukon 88E8053 PCI-E Gigabit
Ethernet Controller

Physical Address. . . . . . . . . : 00-16-E6-85-6A-E4

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : No

IP Address. . . . . . . . . . . . : 192.168.1.33

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.1

DHCP Server . . . . . . . . . . . : 192.168.1.1

DNS Servers . . . . . . . . . . . : 192.168.1.1

NetBIOS over Tcpip. . . . . . . . : Disabled

Lease Obtained. . . . . . . . . . : Wednesday, September 05, 2007 4:07:18
PM

Lease Expires . . . . . . . . . . : Saturday, September 08, 2007 4:07:18 PM

05-Sep-07 11:08 AM

Did you set your network cards IP info manually?

Anyway, as I said before - I would install ISA again and run the ICW.

05-Sep-07 11:18 AM

The LAN card was set manualy and the internet card is on DHCP from the modem.

There's a 4 port wireless router through which clients connect, and its
hooked up to the switch. Its IP adress is 192.168.1.254. Could that not be
causing the problem also?

I will reinstall ISA now and run ICW again..will keep u posted.
Thanks

05-Sep-07 11:29 AM

Sorry _ I should have said, I personally would give the NIC attached to the
modem a fixed IP address. Are there any other devices attached to the modem?

05-Sep-07 12:03 PM

Yes SBS is much happier running DHCP and it should have a static IP from the
modem. The DNS entries on the NICs should point to the internal NIC IP.
Running the CEICW will help ensure your settings are correct.

05-Sep-07 06:28 PM

Poodle....

If you can't get it to work without ISA, it is not going to work with it.

I would take the following path, then come back to the fork in the road
where you can install ISA.

As Cris has said, you will be better served with a router between your SBS
external nic an the inet modem but this is not technically necessary, just
one more layer for the bad guys to hack though.

Get all your IP configurations corrected.  Post them back here if you want
verification.

Be sure to turn off any DHCP server except the SBS, and be sure it is
running.

Then, run the CEICW to reset the SBS.

Verify that the server has inet access.

Go to a workstation

Remove or disable the ISA client

then Control Panel, Inet Options, Connections, Lan Settings,
be sure the a proxy box is checked,  server name or IP, port 8080
tick the bypass box.

close out.

open a cmd prompt.

Type:
ipconfig /release
ipconfig /renew
ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew

plug in your internet line to your external nic

now try the internet.

Then unplug it again until you get your router.  Or not.

Larry

06-Sep-07 05:54 AM

Windows IP Configuration



Host Name . . . . . . . . . . . . : MONGKHUMOSBS01

Primary Dns Suffix  . . . . . . . : MONGKHUMO.local

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : Yes

WINS Proxy Enabled. . . . . . . . : Yes

DNS Suffix Search List. . . . . . : MONGKHUMO.local



Ethernet adapter LAN:



Connection-specific DNS Suffix  . :

Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigabit
Ethernet NIC

Physical Address. . . . . . . . . : 00-08-A1-99-00-17

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.2.6

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

DNS Servers . . . . . . . . . . . : 192.168.2.6

NetBIOS over Tcpip. . . . . . . . : Disabled



Ethernet adapter Internet:



Connection-specific DNS Suffix  . :

Description . . . . . . . . . . . : Marvell Yukon 88E8053 PCI-E Gigabit
Ethernet Controller

Physical Address. . . . . . . . . : 00-16-E6-85-6A-E4

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.1.34

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.1

DNS Servers . . . . . . . . . . . : 192.168.2.6

NetBIOS over Tcpip. . . . . . . . : Disabled

This is my current configuration. I removed ISA this morning after having
fought with it for over 3 hours.
On the LAN card, I did install and activated the NETBIOS protocol, but its
stil showing as disbaled, not sure why.

My binding order also shows LAN as first, then Internet.

The server has internet, but not the clients.

Lastly, ICS refuses to start, when I start it manualy it gives says: Error
170: requested resource in use.

Im realy frustrated, cause my office clients have been without internet for
a week now cos of this.

06-Sep-07 06:29 AM

the ipconfig looks ok except for the netbios, and if you have only nt class
computers, you "should be" ok  unfortunately, it is really unpredictable.

since the server has inet, we can rule out the router or the inet device.

don't see any reference to WINS, which is unusual...??

are there any errors of note in your event logs - server - workstation?

can you post the results of ipconfig /all from a workstation please.

and have you restarted the server and at least the trial workstation?

all other network services normal?  Can ping the sbs server from the wkst by
ip and name?

still doing a little research, but post back if you are still awake.  <g>

Larry


On the LAN card, I did install and activated the NETBIOS protocol, but its

06-Sep-07 07:40 AM

Larry

I can ping the server fromt the client, using both 192.168.2.6 and
mongkhumosbs01. The client can print through the server and can reveive
emails frome exhchange. So I think a connection exists.

The client connects through a wireles router, a wireless router we've pluged
into the switch. We've also disabled the router's DHCP, but have not changed
its IP adress of 192.168.1.254.

The ADSL modem connects directly to the server through that Internet NIC.

Are there any proxy settings that I may need to configure on the client pc,
considering that Ive removed ISA?


Lastly, Im trying to copy the config/all to the c:, it keeps on saying
access denied and Im the administrator on that client computer. Its running
Vista Ultimate.

Its now 13:37pm where I am and still at work.

06-Sep-07 07:58 AM

Geez:  Vista and Wireless?

Any wired XP clients available?

Or, lacking that can you plug a patch cable in from the client to the
switch?

If you have the ISA firewall client installed on the workstation you need to
remove or disable it.

I put that in my first reply to you, along with some other stuff.

makes no sense that you can't write to the C drive of the local computer,
but lots of things in Vista still make no sense to me.

If you have, or can make, a mapped drive to the server, see if you can write
the ipconfig to the mapped drive.

Larry

06-Sep-07 08:54 AM

Windows IP Configuration

Host Name . . . . . . . . . . . . : Tumim
Primary Dns Suffix  . . . . . . . : MONGKHUMO.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : MONGKHUMO.local

Wireless LAN adapter Wireless:

Connection-specific DNS Suffix  . : MONGKHUMO.local
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 3945ABG Network
Connection
Physical Address. . . . . . . . . : 00-13-02-3B-DA-F5
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::a124:fba4:c9a9:e1d7%9(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.104(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 06 September 2007 01:53:17 PM
Lease Expires . . . . . . . . . . : 14 September 2007 01:53:16 PM
Default Gateway . . . . . . . . . : 192.168.2.6
DHCP Server . . . . . . . . . . . : 192.168.2.6
DHCPv6 IAID . . . . . . . . . . . : 150999810
DNS Servers . . . . . . . . . . . : 192.168.2.6
Primary WINS Server . . . . . . . : 192.168.2.6
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Cabled:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection
Physical Address. . . . . . . . . : 00-A0-D1-3E-3A-8D
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

I dont have ISA on any of the clients, just Norton 2007.
The other strange thing is that my network drives also dont appear anymore
and I can even find SBS on my network devices. Effectively, I cant get any of
the shared folders.
I will go and get an XP client that we can test with also now.

06-Sep-07 09:00 AM

Norton 2007 what?  If the workstation has Norton Internet Security or any
type of consumer grade "security" program, try disabling that.

come to think of  it, for the purposes of a test, preferably on a wired
connection, and xp if possible, run MSCONFIG and disable all third party
services and startups, and report back.

Larry

06-Sep-07 09:20 AM

Windows IP Configuration



Host Name . . . . . . . . . . . . : KagisoM

Primary Dns Suffix  . . . . . . . : MONGKHUMO.local

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : MONGKHUMO.local

MONGKHUMO.local



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix  . : MONGKHUMO.local

Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet Adapter

Physical Address. . . . . . . . . : 00-11-5B-AA-2E-AB

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.2.114

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.2.6

DHCP Server . . . . . . . . . . . : 192.168.2.6

DNS Servers . . . . . . . . . . . : 192.168.2.6

Primary WINS Server . . . . . . . : 192.168.2.6

Lease Obtained. . . . . . . . . . : Thursday, September 06, 2007
3:11:47 PM

Lease Expires . . . . . . . . . . : Friday, September 14, 2007
3:11:47 PM

The above is for the XP Pro machine that I just connected. I disabled
everything and restarted the machine.

Ya, its Norton Internet Security 2007

06-Sep-07 09:41 AM

And still no inet from workstation?  Has this on been on the SBS prior, does
it have the ISA firewall?

What is in the use proxy settings of IE connections lan connections?

if server name, try ip or vice versa.

Larry

06-Sep-07 09:54 AM

Poodle:

I think I have lost track of your steps:  can you confirm that since you
removed ISA the last time you have run the CEICW at least once, that you are
confident that you followed all the steps properly, and that you have
restarted both the server and the test workstation?

And that each of them can ping the other by name and IP?

and that the DNS ip addys given by your ISP are in the settings of the
forwarders tab of DNS on the Server (in admin tools).

Larry

06-Sep-07 10:00 AM

Its been on the  domain through a wireless connection all along.

This is the msg IE gives me:

Welcome to Windows Small Business Server 2003
To get started, click a link.


My Company's Internal Web Site
Collaborate and share documents on your company's internal Web site.

Network Configuration Wizard
Join a client computer to te Windows Small Business Server network.

Remote Web Workplace
Connect to the Windows Small Business Server network over the Internet.

Information and Answers
Learn more about Windows Small Business Server.


The proxy server is set to 192.168.2.6 or mongkhumosbs01 and the port is 80,
still to no solution.

I can print from this machine and get it email from SBS Exchange, but stil
no internet. Im actually using internet directly from our server as we speak.

06-Sep-07 10:05 AM

Change the port to 8080  that will get you out of the RWW site.

Larry

06-Sep-07 10:46 AM

I have changed to port 8080, stil no internet. It just says internet explorer
cannot display the webpage

06-Sep-07 10:50 AM

You did not answer this one:

I think I have lost track of your steps:  can you confirm that since you
removed ISA the last time you have run the CEICW at least once, that you are
confident that you followed all the steps properly, and that you have
restarted both the server and the test workstation?

And that each of them can ping the other by name and IP?

and that the DNS ip addys given by your ISP are in the settings of the
forwarders tab of DNS on the Server (in admin tools).

further:
on the server and the workstation:

ipconfig /flushdns
ipconfig /registerdns

on the workstation
ipconfig /release
ipconfig /renew


Larry

06-Sep-07 11:10 AM

After I removed ISA 2day, I reran CEICW and it gave me a 100% completion.

I dont have an IP adress from my ISP, only a username and password. The IP
address Ive bin entering for the Internet NIC, Ive bin reading it from the
NIC itself if its I set set the modem to DHCP and conect it on a client. The
server has bin refusing to conect with the modem if I leave its NIC to
Automatic Settings.

Ive just tried pinging the test DCHP client from the server. It timed out!
IP 192.168.2.114

I ping the printer from the server, whose IP address was manually assigned
and it pings it 100%! IP 192.168.2.150

Im totaly perplexed now!!

06-Sep-07 11:16 AM

Im also noticing Lary that my server LAN adapter has no Gateway Specified on
it, is this also not a problem?

What is the gateway supposed to be and what is supposed to be for the client?

06-Sep-07 11:17 AM

Ok basics:

Is there a router between your external nic and your inet device... what
brand and model?

What is the inet device... dsl modem?  Cable modem?  T1?

If there is a router, it has a WAN side/port and a LAN side with 1 or more
ports.

Wan ip =
Lan ip OF THE ROUTER =

you can determine this by using the mfgs instructions to look at the config
pages on the router.

If no router:

Ip of the external nic in your server,

and in both cases is it a static ip from your ISP or is it dynamically
assigned?

Larry

06-Sep-07 11:44 AM

This is our structure:
Wilress Client-- 4 Port Wireless Router with WAN port--8 port switch---LAN NIC

ADSL cable modem---Internet NIC

The router is a Gigabyte BR02G and the modem is a ZyXEL Prestige 600

The wireless router is connected to the switch using one of its 4 LAN ports.
We have also disabled the router's DHCP. We access the router's setting using
192.168.1.254.

Also connected to the switch is a cable from the LAN NIC and the printer.

The modem only has an RJ11 whole for the ADSL phone line and a RJ45 for the
LAN.

IP of the LAN NIC on server is 192.168.2.6
IP we use to access the router's setings is 192.168.1.254
IP of the modem is assigned by the modem itself and its normaly
192.168.1.33/34
We do not have an IP adres from the ISP.

06-Sep-07 12:04 PM

Ok, but what you are calling a router would normally be called, or should
be, a Wireless Access Point, WAP.


The WAP Gets an IP from the DHCP of the server, and Gives an IP to the
wireless clients.


The WAP can be connected to a switch, or directly to the Internal nic of the
SBS server.


This is the side where we would usually see a "router"



Well, you do, but it is hidden from you by the Zyxel box, which is really a
dhcp addy to the WAN side of that box and do NAT to the LAN side.  Since you
can't manage it, that's why most would prefer a router.  No way to direct or
block any incoming.

More questions:

What is the IP address of the external nic?

you can get that from ipconfig /all from your server.  Get a fresh one and
clean it up by removing the excess spaces, but don't change anything else.

From the server:

start - admin tools - dns - select your server name on the left - right
click -  select properties.

click the forwarders tab:  What ip addresses, if any, are listed there?

Larry

06-Sep-07 12:16 PM

With SBS there is no gateway for the internal nic or the clients.

that is why you put the server name and 8080 in the connections/lan
properties.

Larry

06-Sep-07 12:18 PM

Starting a new Branch... please use this one.

Check your event viewer again please and let us now what errors you see
there.. the ones in Red.

Larry

06-Sep-07 12:26 PM

Its now 18:22 and Im knocking off work. I stay some 100 K's from work, so I
have a long drive. I will try all these sugested solutions 2moro first thing
and brief you back.

Thanks Larry

06-Sep-07 12:30 PM

Please also see the response below about some of your current questions

07-Sep-07 04:34 AM

Event Type:	Error
Event Source:	W32Time
Event Category:	None
Event ID:	17
Date:		9/7/2007
Time:		9:32:36 AM
User:		N/A
Computer:	MONGKHUMOSBS01
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 60 minutes. The error was: No such service is known. The service
cannot be found in the specified name space. (0x8007277C)


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type:	Error
Event Source:	DNS
Event Category:	None
Event ID:	6702
Date:		8/31/2007
Time:		4:59:02 PM
User:		N/A
Computer:	MONGKHUMOSBS01
Description:
DNS server has updated its own host (A) records.  In order to ensure that
its DS-integrated peer DNS servers are able to replicate with this server, an
attempt was made to update them with the new records through dynamic update.
An error was encountered during this update, the record data is the error
code.

If this DNS server does not have any DS-integrated peers, then this error
should be ignored.

If this DNS server's Active Directory replication partners do not have the
correct IP address(es) for this server, they will be unable to replicate with
it.

To ensure proper replication:
1) Find this server's Active Directory replication partners that run the DNS
server.
2) Open DnsManager and connect in turn to each of the replication partners.
3) On each server, check the host (A record) registration for THIS server.
4) Delete any A records that do NOT correspond to IP addresses of this
server.
5) If there are no A records for this server, add at least one A record
corresponding to an address on this server, that the replication partner can
contact.  (In other words, if there multiple IP addresses for this DNS
server, add at least one that is on the same network as the Active Directory
DNS server you are updating.)
6) Note, that is not necessary to update EVERY replication partner.  It is
only necessary that the records are fixed up on enough replication partners
so that every server that replicates with this server will receive (through
replication) the new data.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00               *#..

These are the 2 main errors that I c. The other one was for POP3, but it has
since stopoed coause I've just pluged in the modem.

07-Sep-07 08:54 AM

More questions:

What is the IP address of the external nic?

you can get that from ipconfig /all from your server.  Get a fresh one and
clean it up by removing the excess spaces, but don't change anything else.

From the server:

start - admin tools - dns - select your server name on the left - right
click -  select properties.

click the forwarders tab:  What ip addresses, if any, are listed there?

I am going to have to go out.  If you get this back in the next few minutes,
I can take a look.

If you don't get this resolved soon, start a new thread with a different
title, and include the ipconfig /all from server and workstation in your
first post.  You could even say that I had to go out, and ask for others to
help so they will know that they are not claim jumping.  (a term from the
old days in the US west when mining claims were frequently imposed upon).

Larry

07-Sep-07 09:42 AM

Windows IP Configuration
Host Name . . . . . . . . . . . . : MONGKHUMOSBS01
Primary Dns Suffix  . . . . . . . : MONGKHUMO.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : MONGKHUMO.local

Ethernet adapter LAN:
Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigabit
Ethernet NIC
Physical Address. . . . . . . . . : 00-08-A1-99-00-17
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.6
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.2.6
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Internet:
Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : Marvell Yukon 88E8053 PCI-E Gigabit
Ethernet
Physical Address. . . . . . . . . : 00-16-E6-85-6A-E4
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.34
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.2.6
NetBIOS over Tcpip. . . . . . . . : Disabled

Still dont understand why my NtBIOS is disabled when its shown as activated
in my network connections tab.

The DNS forwarders is empty, there's no IP addresses there.

Poodle
CCNA

07-Sep-07 09:55 AM

Ok:  There has to be some way for your workstations to "find" the internet
page you are trying to reach.

The internet works on ip addresses, not on names.

The DNS system translates the names into ip addresses.

An SBS server is at the bottom of the list.  It is too far down to know
where every ip address on the internet is.

It, and the workstations, use the DNS settings given to you by your ISP to
go up to the next level to find the ip addresses.  On the SBS the setting
for where to look is stored in the Forwarders Tab.

And your ISP uses HIS DNS forwards in the same way until some DNS server
upstream nods it head and replies www.whatever.com is at 192.192.192.192.
This info travels back to your isp, back to your sbs and back to your
browser, which then connects.

So, you need to run the CEICW again and be sure you put the DNS settings
that your ISP gives you into the CEICW when it asks for them.

Or, if you get lucky, you can put them in the forwarders tab yourself, but
you must know what they are.

And now, I have to go out.

Larry

In an SBS setup, the workstations look to the SBS for the