ADSL and ISA take 2

Last week we installed ADSL (Speedtouch 510,ISP is Demon). We have one
IP for the router and one for the 2nd NIC in the SBS server. I ran ICW
and got internet connectivity but my ISP could not telnet to port 25
for email. I could telnet from the internal network but not from a
remote pc. I had to rerun ICW to get back to my ISDN router (again on
the second NIC).

My ISP tells me it is a problem with ISA.

1) should I be able to: telnet <second IP> 25

2) where should I be looking for the problem

3) Given my current setup is via the second nic and an ISDN router,
what is changing that can cause this problem

Regards

Richard

fbrown
Mon Nov 03 12:22:39 CST 2003

Thank you for posting your question to the Newsgroup.

It appears from your post that you are able to telnet to port 25 on the
external NIC from your internal clients, which would suggest that the ISA
packet filter for SMTP (TCP port 25) is in place and functioning. I would
suggest installing Network monitor on your server and trace an external
telnet attempt to TCP port 25. This would tell you if the external NIC is
receiving any traffic from the router. If you do not see any traffic, it
would indicate possible configuration issues with the router. You may also
want to trace a successful connection from one of your internal clients for
comparison.

The following knowledge base article should help you with netmon...

812953 HOW TO: Use Network Monitor to Capture Network Traffic
http://support.microsoft.com/?id=812953

You may also want to review the IP settings on your server:
Verify that only the external interface has a gateway entry
Verify that both internal and external NIC's are pointing to the internal
NIC for DNS name resolution
Verify that your DNS server is configured to forward external DNS name
requests to your ISP's DNS server (properties of the DNS server, forwarders
tab)
Verify binding order: Internal nic bound first, followed by external NIC
(Properties of "my network places", Advanced -- menu, advanced settings)


Regards,

Frank Brown
Microsoft Small Business Server Support

This posting is provided "AS IS" with no warranties, and confers no rights.

Marina
Mon Nov 03 12:20:33 CST 2003

You probably have to open up port 25 in your Speedtouch. Then you should be
able to telnet to it from outside your network.

Marina

"Richard Prossor" <richard.prossor@prossor.com> schreef in bericht
news:ffaf0abc.0311030900.2ed9fe94@posting.google.com...
> Last week we installed ADSL (Speedtouch 510,ISP is Demon). We have one
> IP for the router and one for the 2nd NIC in the SBS server. I ran ICW
> and got internet connectivity but my ISP could not telnet to port 25
> for email. I could telnet from the internal network but not from a
> remote pc. I had to rerun ICW to get back to my ISDN router (again on
> the second NIC).
>
> My ISP tells me it is a problem with ISA.
>
> 1) should I be able to: telnet <second IP> 25
>
> 2) where should I be looking for the problem
>
> 3) Given my current setup is via the second nic and an ISDN router,
> what is changing that can cause this problem
>
> Regards
>
> Richard

Richard
Mon Nov 03 16:14:48 CST 2003

Frank

thanks for your reply. I have checked the IP settings and they are fine.
they are working currently for my ISDN router running off a second NIC on
the server and I can telnet to the ip given to me by my ISP port 25 and
connect to my exchange server. I will install netmon and test next time I
am in the office.

Reading between the lines, you indicate that there may be some settings on
the router that are blocking port 25. What should I be looking for?

Regards

Richard

"Frank Brown [MSFT]" <fbrown@online.microsoft.com> wrote in message
news:BeuN9djoDHA.1544@cpmsftngxa06.phx.gbl...
> Thank you for posting your question to the Newsgroup.
>
> It appears from your post that you are able to telnet to port 25 on the
> external NIC from your internal clients, which would suggest that the ISA
> packet filter for SMTP (TCP port 25) is in place and functioning. I would
> suggest installing Network monitor on your server and trace an external
> telnet attempt to TCP port 25. This would tell you if the external NIC is
> receiving any traffic from the router. If you do not see any traffic, it
> would indicate possible configuration issues with the router. You may
also
> want to trace a successful connection from one of your internal clients
for
> comparison.
>
> The following knowledge base article should help you with netmon...
>
> 812953 HOW TO: Use Network Monitor to Capture Network Traffic
> http://support.microsoft.com/?id=812953
>
> You may also want to review the IP settings on your server:
> Verify that only the external interface has a gateway entry
> Verify that both internal and external NIC's are pointing to the internal
> NIC for DNS name resolution
> Verify that your DNS server is configured to forward external DNS name
> requests to your ISP's DNS server (properties of the DNS server,
forwarders
> tab)
> Verify binding order: Internal nic bound first, followed by external NIC
> (Properties of "my network places", Advanced -- menu, advanced settings)
>
>
> Regards,
>
> Frank Brown
> Microsoft Small Business Server Support
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>

Marina
Mon Nov 03 18:28:58 CST 2003

Hi Richard,

Have a look here:
http://www.netintegrity.com.au/webstprosetup.html


Marina

"Richard Prossor" <richard.prossor@prossor.com> schreef in bericht
news:ffaf0abc.0311030900.2ed9fe94@posting.google.com...
> Last week we installed ADSL (Speedtouch 510,ISP is Demon). We have one
> IP for the router and one for the 2nd NIC in the SBS server. I ran ICW
> and got internet connectivity but my ISP could not telnet to port 25
> for email. I could telnet from the internal network but not from a
> remote pc. I had to rerun ICW to get back to my ISDN router (again on
> the second NIC).
>
> My ISP tells me it is a problem with ISA.
>
> 1) should I be able to: telnet <second IP> 25
>
> 2) where should I be looking for the problem
>
> 3) Given my current setup is via the second nic and an ISDN router,
> what is changing that can cause this problem
>
> Regards
>
> Richard

Murphy
Mon Nov 03 21:33:30 CST 2003

Had the same problem:
a) open 25 on the modem
b) ensure ISP is not blocking 25 for incoming connections

"Richard Prossor" <richard.prossor@prossor.com> wrote in message
news:ffaf0abc.0311030900.2ed9fe94@posting.google.com...
> Last week we installed ADSL (Speedtouch 510,ISP is Demon). We have one
> IP for the router and one for the 2nd NIC in the SBS server. I ran ICW
> and got internet connectivity but my ISP could not telnet to port 25
> for email. I could telnet from the internal network but not from a
> remote pc. I had to rerun ICW to get back to my ISDN router (again on
> the second NIC).
>
> My ISP tells me it is a problem with ISA.
>
> 1) should I be able to: telnet <second IP> 25
>
> 2) where should I be looking for the problem
>
> 3) Given my current setup is via the second nic and an ISDN router,
> what is changing that can cause this problem
>
> Regards
>
> Richard

richard
Tue Nov 04 05:18:05 CST 2003

Marina

thanks for this link. I can see the setup on the router for port
forwarding. Should I be forwarding from the router to the IP of the
2nd NIC on the server or to the internal NIC.

Regards

Richard




"Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message news:<epCpb.147771$506.141839@typhoon.bart.nl>...
> Hi Richard,
>
> Have a look here:
> http://www.netintegrity.com.au/webstprosetup.html
>
>
> Marina
>
> "Richard Prossor" <richard.prossor@prossor.com> schreef in bericht
> news:ffaf0abc.0311030900.2ed9fe94@posting.google.com...
> > Last week we installed ADSL (Speedtouch 510,ISP is Demon). We have one
> > IP for the router and one for the 2nd NIC in the SBS server. I ran ICW
> > and got internet connectivity but my ISP could not telnet to port 25
> > for email. I could telnet from the internal network but not from a
> > remote pc. I had to rerun ICW to get back to my ISDN router (again on
> > the second NIC).
> >
> > My ISP tells me it is a problem with ISA.
> >
> > 1) should I be able to: telnet <second IP> 25
> >
> > 2) where should I be looking for the problem
> >
> > 3) Given my current setup is via the second nic and an ISDN router,
> > what is changing that can cause this problem
> >
> > Regards
> >
> > Richard

Marina
Tue Nov 04 06:23:46 CST 2003

Hi Richard,

You forward from the router to the IP of your external nic.

Marina

"Richard Prossor" <richard.prossor@prossor.com> schreef in bericht
news:ffaf0abc.0311040318.5e27d48c@posting.google.com...
> Marina
>
> thanks for this link. I can see the setup on the router for port
> forwarding. Should I be forwarding from the router to the IP of the
> 2nd NIC on the server or to the internal NIC.
>
> Regards
>
> Richard
>
>
>
>
> "Marina Roos" <marina@roos.nodontwantspam.nl.com> wrote in message
news:<epCpb.147771$506.141839@typhoon.bart.nl>...
> > Hi Richard,
> >
> > Have a look here:
> > http://www.netintegrity.com.au/webstprosetup.html
> >
> >
> > Marina
> >
> > "Richard Prossor" <richard.prossor@prossor.com> schreef in bericht
> > news:ffaf0abc.0311030900.2ed9fe94@posting.google.com...
> > > Last week we installed ADSL (Speedtouch 510,ISP is Demon). We have one
> > > IP for the router and one for the 2nd NIC in the SBS server. I ran ICW
> > > and got internet connectivity but my ISP could not telnet to port 25
> > > for email. I could telnet from the internal network but not from a
> > > remote pc. I had to rerun ICW to get back to my ISDN router (again on
> > > the second NIC).
> > >
> > > My ISP tells me it is a problem with ISA.
> > >
> > > 1) should I be able to: telnet <second IP> 25
> > >
> > > 2) where should I be looking for the problem
> > >
> > > 3) Given my current setup is via the second nic and an ISDN router,
> > > what is changing that can cause this problem
> > >
> > > Regards
> > >
> > > Richard

fbrown
Tue Nov 04 07:06:31 CST 2003

Most router perform Network Address Translation (NAT) or port forwarding.
This takes requests on the external interface of the router and forwards
them to an internal address on your network. You want to make sure that
your router is configured to forward requests to TCP port 25 from the
external interface of your router to the IP address of the SB Server's
external IP.


Regards,

Frank Brown
Microsoft Small Business Server Support

This posting is provided "AS IS" with no warranties, and confers no rights.

richard
Wed Nov 05 07:51:40 CST 2003

Frank

I have tried again to set up the adsl connection but with the same
results. I can browse the web but my ISP cannot telnet to Exchange. We
have tried a number of other tests to work out where the problem is.

1) The ISP can ping the router (80.176.221.153) but not the network
card (80.176.221.154) when it is connected to the SBS server.

However we also set the adsl router up on a stand alone PC with the PC
set to use DNS from the ISP. This works fine and the ISP can see the
internal card.

(On the server the DNS setting for the 2nd NIC is set to look to the
internal NIC rather than the DNS of the ISP)

2) When the router is connected to the server, I can ping the 2nd NIC
but not the router.


Following the test with the stand alone PC, the ISP is saying that the
router is working fine and that the problem is related to the firewall
- i.e. the SBS server. Does any of the above provide some indication
of where the problem is?

Regards

Richard





fbrown@online.microsoft.com (Frank Brown [MSFT]) wrote in message news:<Br4EHStoDHA.2148@cpmsftngxa06.phx.gbl>...
> Most router perform Network Address Translation (NAT) or port forwarding.
> This takes requests on the external interface of the router and forwards
> them to an internal address on your network. You want to make sure that
> your router is configured to forward requests to TCP port 25 from the
> external interface of your router to the IP address of the SB Server's
> external IP.
>
>
> Regards,
>
> Frank Brown
> Microsoft Small Business Server Support
>
> This posting is provided "AS IS" with no warranties, and confers no rights.