Sorry for the crossposting. I've been waiting hours for Google to show my
post at ....windows.server.sbs (a group my ISP doesn't serve). You guys are
my last hope.

At work, we've recently connected a Linksys WAG54G modem/router to our 26
port hub. Our Windows 2003 SBS was already connected to this hub, serving
up our work software in a shared folder. Clients log onto the server thru a
domain. All clients have dynamic IP's (with long, long leases).

Unfortunately, after running the SBS Internet Connection Wizard and
inputting the router's IP and ISP's DNS, our clients are still unable to
connect to the WWW. The only way to get clients online is to configure them
individually to use the router's IP as their gateway and to manually input
the ISP's DNS. Apparently this is not the proper way to do it. Microsoft's
help says all clients should point normally to the server and the server
should connect them to the internet providing router.

FYI, the router's DHCP function is turned off, and the router has been
assigned an IP in the SBS's subnet. Also, the SBS is connected to the hub
via a gigabit cable. I can ping the router from SBS, and vice versa.

Thanks in advance for your advice.

Evan Joanette

You should be using 2 nics in the server. The 2nd nic will connect to your
router.
Put that 2nd nic in a different IP-range, let DNS point to your server-IP
only, check the bindingorder and make sure the internal nic is on top. Rerun
the CEICW-wizard.
Do you have Premium or Standard?
If you can't get to the microsoft.public.windows.server.sbs newsgroup, try
the microsoft.public.backoffice.smallbiz2000 newsgroup.

--
Regards,

Marina
Microsoft SBS-MVP

"Evan Joanette" <(E-Mail Removed)> schreef in bericht
news:Pfb%b.2508$(E-Mail Removed)...
> Sorry for the crossposting. I've been waiting hours for Google to show my
> post at ....windows.server.sbs (a group my ISP doesn't serve). You guys
are
> my last hope.
>
> At work, we've recently connected a Linksys WAG54G modem/router to our 26
> port hub. Our Windows 2003 SBS was already connected to this hub, serving
> up our work software in a shared folder. Clients log onto the server thru
a
> domain. All clients have dynamic IP's (with long, long leases).
>
> Unfortunately, after running the SBS Internet Connection Wizard and
> inputting the router's IP and ISP's DNS, our clients are still unable to
> connect to the WWW. The only way to get clients online is to configure
them
> individually to use the router's IP as their gateway and to manually input
> the ISP's DNS. Apparently this is not the proper way to do it.
Microsoft's
> help says all clients should point normally to the server and the server
> should connect them to the internet providing router.
>
> FYI, the router's DHCP function is turned off, and the router has been
> assigned an IP in the SBS's subnet. Also, the SBS is connected to the hub
> via a gigabit cable. I can ping the router from SBS, and vice versa.
>
> Thanks in advance for your advice.
>
> Evan Joanette
>
>

"Marina Roos [SBS-MVP]" <(E-Mail Removed)> wrote in message
news:5zb%b.5626$(E-Mail Removed)...
> You should be using 2 nics in the server. The 2nd nic will connect to your
> router. Put that 2nd nic in a different IP-range, let DNS point to your
server-IP
> only, check the bindingorder and make sure the internal nic is on top.
Rerun
> the CEICW-wizard.

There is much talk on MS's site about the two network card setup, but they
insist it will work with one card!?

So the second network card in the server would be configured like any other
computer would to find the router?

Our SBS is standard I think.

As for the newsgroups, my ISP hosts very few of them. The best ones for my
prob are only available thru Google, but replies take AGES.

Evan

In message <ekh%b.4648$(E-Mail Removed)>, Evan
Joanette <(E-Mail Removed)> writes
>There is much talk on MS's site about the two network card setup, but they
>insist it will work with one card!?
It will, but two cards are better, there's no possibility of your users
bypassing your access rules by connecting directly to the router, you
then have one central management console you can use to control all
users access to the net.
>
>So the second network card in the server would be configured like any other
>computer would to find the router?
Nope, you need to read the knowledgebase articles to configure it, they
explain what you needed to configure on the server as well as the
obvious. It's a doddle if you follow the steps in the articles. Beware
of Internet Connection Wizards offering easy solutions, there's more to
it than that.
>
>Our SBS is standard I think.
>
>Evan
>
>

--
Clint Sharp

Clint,

I will be wary of the ICW...I think it led me astray, maybe you can tell me
for sure.

I opened up our SBS DHCP utility. It listed only the server's own IP as the
only DNS server. On a whim, I thought I'd put in the ISP provided DNS as a
secondary server. Lo and behold, all clients now have internet access. I
presume the ICW should have set these numbers up or have I done something
that I shouldn't have?

You're right about any of the users getting to the router. Fortunately, it
has a password. I'll have to keep chatting with the IT manager to see what
we think is the best solution. We're now online with only one network card,
and the router provides good firewall and ability to limit internet access.

Our next big challenge is dumping our freeware mail relay program and
getting MS Exchange running.

Evan


"Clint Sharp" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> In message <ekh%b.4648$(E-Mail Removed)>, Evan
> Joanette <(E-Mail Removed)> writes
> >There is much talk on MS's site about the two network card setup, but
they
> >insist it will work with one card!?
> It will, but two cards are better, there's no possibility of your users
> bypassing your access rules by connecting directly to the router, you
> then have one central management console you can use to control all
> users access to the net.
> >
> >So the second network card in the server would be configured like any
other
> >computer would to find the router?
> Nope, you need to read the knowledgebase articles to configure it, they
> explain what you needed to configure on the server as well as the
> obvious. It's a doddle if you follow the steps in the articles. Beware
> of Internet Connection Wizards offering easy solutions, there's more to
> it than that.
> >
> >Our SBS is standard I think.
> >
> >Evan
> >
> >
>
> --
> Clint Sharp

Hi Evan,

2 nics is really recommended. Set it up like this:
Internal:
IP: 192.168.16.2
GW: blank
DNS: 192.168.16.2

External:
IP: 10.0.0.2
GW: 10.0.0.3
DNS 192.168.16.2

In DNS-server, it should only listen to the 192.168.16.2 and the
ISP-DNS-numbers should be set in the tab Forwarders.
Check bindingorder and make sure the internal nic is on top.
Checkout www.smallbizserver.net.

--
Regards,

Marina
Microsoft SBS-MVP

"Evan Joanette" <(E-Mail Removed)> schreef in bericht
news:ldr%b.166$(E-Mail Removed)...
> Clint,
>
> I will be wary of the ICW...I think it led me astray, maybe you can tell
me
> for sure.
>
> I opened up our SBS DHCP utility. It listed only the server's own IP as
the
> only DNS server. On a whim, I thought I'd put in the ISP provided DNS as
a
> secondary server. Lo and behold, all clients now have internet access. I
> presume the ICW should have set these numbers up or have I done something
> that I shouldn't have?
>
> You're right about any of the users getting to the router. Fortunately,
it
> has a password. I'll have to keep chatting with the IT manager to see what
> we think is the best solution. We're now online with only one network
card,
> and the router provides good firewall and ability to limit internet
access.
>
> Our next big challenge is dumping our freeware mail relay program and
> getting MS Exchange running.
>
> Evan
>
>
> "Clint Sharp" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > In message <ekh%b.4648$(E-Mail Removed)>, Evan
> > Joanette <(E-Mail Removed)> writes
> > >There is much talk on MS's site about the two network card setup, but
> they
> > >insist it will work with one card!?
> > It will, but two cards are better, there's no possibility of your users
> > bypassing your access rules by connecting directly to the router, you
> > then have one central management console you can use to control all
> > users access to the net.
> > >
> > >So the second network card in the server would be configured like any
> other
> > >computer would to find the router?
> > Nope, you need to read the knowledgebase articles to configure it, they
> > explain what you needed to configure on the server as well as the
> > obvious. It's a doddle if you follow the steps in the articles. Beware
> > of Internet Connection Wizards offering easy solutions, there's more to
> > it than that.
> > >
> > >Our SBS is standard I think.
> > >
> > >Evan
> > >
> > >
> >
> > --
> > Clint Sharp
>
>

I've taken your advice and installed a second nic.

Our clients can navigate the WWW, but only if Internet Explorer is set to
use a proxy server.

Also, email and newsgroups aren't working. I'm wondering if any ports have
to be opened?


"Marina Roos [SBS-MVP]" <(E-Mail Removed)> wrote in message
news:Ons%b.5646$(E-Mail Removed)...
> Hi Evan,
>
> 2 nics is really recommended. Set it up like this:
> Internal:
> IP: 192.168.16.2
> GW: blank
> DNS: 192.168.16.2
>
> External:
> IP: 10.0.0.2
> GW: 10.0.0.3
> DNS 192.168.16.2

"Marina Roos [SBS-MVP]" wrote:
: You should be using 2 nics in the server. The 2nd nic will connect to your
: router.
: Put that 2nd nic in a different IP-range, let DNS point to your server-IP
: only, check the bindingorder and make sure the internal nic is on top.
Rerun
: the CEICW-wizard.
: Do you have Premium or Standard?
: If you can't get to the microsoft.public.windows.server.sbs newsgroup, try
: the microsoft.public.backoffice.smallbiz2000 newsgroup.

Clear something up for me here. I'm not running SBS but I am running W2K
Adv. Server. I have a SOHO router, although mine is Belkin but pretty much
the same setup. I use AD and my DNS is set for all computers to my server.
I have NO connections to the ISPs DNS, including forwarders which are not
required. I am not using 2 NICs and I do not want to route through my
server. I have MS Exchange 2K Enterprise, MS SQL 2K and IIS with .NET. I
have no issues. Why would your proposal be any different for SBS than for
my scenario?

What I do see missing here is nobody asked if there was a root entry in the
forward lookup zone which would keep them from surfing the net without using
ISP DNS servers for name resolution, which is definitely a no-no.

TIA...

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/service...p?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default...b;EN-US;308201

Do you have the Standard or Premium version? If the last one and ISA is
installed, make sure the clients have the Firewall Client installed.
And yes, IE settings should point to the servername or -IP and port 8080 for
proxy.

--
Regards,

Marina
Microsoft SBS-MVP

"Evan Joanette" <(E-Mail Removed)> schreef in bericht
news:e7Twfck$(E-Mail Removed)...
> I've taken your advice and installed a second nic.
>
> Our clients can navigate the WWW, but only if Internet Explorer is set to
> use a proxy server.
>
> Also, email and newsgroups aren't working. I'm wondering if any ports have
> to be opened?
>
>
> "Marina Roos [SBS-MVP]" <(E-Mail Removed)> wrote in
message
> news:Ons%b.5646$(E-Mail Removed)...
> > Hi Evan,
> >
> > 2 nics is really recommended. Set it up like this:
> > Internal:
> > IP: 192.168.16.2
> > GW: blank
> > DNS: 192.168.16.2
> >
> > External:
> > IP: 10.0.0.2
> > GW: 10.0.0.3
> > DNS 192.168.16.2
>
>

Hi Roland,

SBS 2003 Premium has also ISA, which is a great firewall if you're using 2
nics. Everything has to go through the server if you want the complete
network benefit from ISA.

--
Regards,

Marina
Microsoft SBS-MVP

"Roland Hall" <nobody@nowhere> schreef in bericht
news:u0wvABl$(E-Mail Removed)...
> "Marina Roos [SBS-MVP]" wrote:
> : You should be using 2 nics in the server. The 2nd nic will connect to
your
> : router.
> : Put that 2nd nic in a different IP-range, let DNS point to your
server-IP
> : only, check the bindingorder and make sure the internal nic is on top.
> Rerun
> : the CEICW-wizard.
> : Do you have Premium or Standard?
> : If you can't get to the microsoft.public.windows.server.sbs newsgroup,
try
> : the microsoft.public.backoffice.smallbiz2000 newsgroup.
>
> Clear something up for me here. I'm not running SBS but I am running W2K
> Adv. Server. I have a SOHO router, although mine is Belkin but pretty
much
> the same setup. I use AD and my DNS is set for all computers to my
server.
> I have NO connections to the ISPs DNS, including forwarders which are not
> required. I am not using 2 NICs and I do not want to route through my
> server. I have MS Exchange 2K Enterprise, MS SQL 2K and IIS with .NET. I
> have no issues. Why would your proposal be any different for SBS than for
> my scenario?
>
> What I do see missing here is nobody asked if there was a root entry in
the
> forward lookup zone which would keep them from surfing the net without
using
> ISP DNS servers for name resolution, which is definitely a no-no.
>
> TIA...
>
> --
> Roland Hall
> /* This information is distributed in the hope that it will be useful, but
> without any warranty; without even the implied warranty of merchantability
> or fitness for a particular purpose. */
> Online Support for IT Professionals -
> http://support.microsoft.com/service...p?fr=0&sd=tech
> How-to: Windows 2000 DNS:
> http://support.microsoft.com/default...b;EN-US;308201
>
>