No internet access through 'Backoffice Internet Access' group - help

Having now successfully added XP (home) and 9.x clients to my first SBS 2000
server I cannot seem to get internet access to happen by allowing access
through ISA to members of the 'BackOffice Internet Users' group.

I have a single BackOffice Internet Access Protocol rule which has to be set
as follows to work

- protocol = all IP traffic
- applies to = Any request

If I set the "applies to" to 'DOMAIN\BackOffice Internet Users' and
"protocol" to 'all IP traffic' clients can get HTTP access but no NNTP or
POP3 access. If I try to select certain IP filters eg NNTP there seems to
be no effect.

I am stumped as to why this happens and I understand that with access set
this way my server is not as secure as it could be.

I am under the assumption that

- users are members of 'BackOffice Internet Users'
- internet access is granted through ISA to ''BackOffice Internet Users'
- so clients should be able to access the Internet according to the IP
packet filters that have been selected (in my case only all IP traffic seems
to work)

I have full patches applied according to hfnetchk pro4.

Can anyone point me in the directions of some help?


TIA

Roger
Sun Jul 20 10:36:48 CDT 2003

Have you installed the Firewall CLient on the desktops? Or you can go to
your IE and Under Tools then internet Options and then LAN Settings down to
the bottom where you see Proxy Settings add your server name and port 8080
and then check the box Bypass Proxy Server for Local Addresses.

Roger Crawford
HTS

"Tony Josephs" <nospam2tony_josephs@hotmail.no.spam.com> wrote in message
news:OgCd5ssTDHA.3700@tk2msftngp13.phx.gbl...
> Having now successfully added XP (home) and 9.x clients to my first SBS
2000
> server I cannot seem to get internet access to happen by allowing access
> through ISA to members of the 'BackOffice Internet Users' group.
>
> I have a single BackOffice Internet Access Protocol rule which has to be
set
> as follows to work
>
> - protocol = all IP traffic
> - applies to = Any request
>
> If I set the "applies to" to 'DOMAIN\BackOffice Internet Users' and
> "protocol" to 'all IP traffic' clients can get HTTP access but no NNTP or
> POP3 access. If I try to select certain IP filters eg NNTP there seems to
> be no effect.
>
> I am stumped as to why this happens and I understand that with access set
> this way my server is not as secure as it could be.
>
> I am under the assumption that
>
> - users are members of 'BackOffice Internet Users'
> - internet access is granted through ISA to ''BackOffice Internet Users'
> - so clients should be able to access the Internet according to the IP
> packet filters that have been selected (in my case only all IP traffic
seems
> to work)
>
> I have full patches applied according to hfnetchk pro4.
>
> Can anyone point me in the directions of some help?
>
>
> TIA
>
>

Tony
Sun Jul 20 10:55:51 CDT 2003

Thanks Roger.

Yes I have both the Firewall Client on the desktops _and_ the Proxy settings
as you have described.

Is it a question of one or other? I have them both at the same time.

TIA



Tony



"Roger Crawford" <rcrawford@scci.com> wrote in message
news:%23iaivUtTDHA.2180@TK2MSFTNGP10.phx.gbl...
> Have you installed the Firewall CLient on the desktops? Or you can go to
> your IE and Under Tools then internet Options and then LAN Settings down
to
> the bottom where you see Proxy Settings add your server name and port 8080
> and then check the box Bypass Proxy Server for Local Addresses.
>
> Roger Crawford
> HTS
>
> "Tony Josephs" <nospam2tony_josephs@hotmail.no.spam.com> wrote in message
> news:OgCd5ssTDHA.3700@tk2msftngp13.phx.gbl...
> > Having now successfully added XP (home) and 9.x clients to my first SBS
> 2000
> > server I cannot seem to get internet access to happen by allowing access
> > through ISA to members of the 'BackOffice Internet Users' group.
> >
> > I have a single BackOffice Internet Access Protocol rule which has to be
> set
> > as follows to work
> >
> > - protocol = all IP traffic
> > - applies to = Any request
> >
> > If I set the "applies to" to 'DOMAIN\BackOffice Internet Users' and
> > "protocol" to 'all IP traffic' clients can get HTTP access but no NNTP
or
> > POP3 access. If I try to select certain IP filters eg NNTP there seems
to
> > be no effect.
> >
> > I am stumped as to why this happens and I understand that with access
set
> > this way my server is not as secure as it could be.
> >
> > I am under the assumption that
> >
> > - users are members of 'BackOffice Internet Users'
> > - internet access is granted through ISA to ''BackOffice Internet Users'
> > - so clients should be able to access the Internet according to the IP
> > packet filters that have been selected (in my case only all IP traffic
> seems
> > to work)
> >
> > I have full patches applied according to hfnetchk pro4.
> >
> > Can anyone point me in the directions of some help?
> >
> >
> > TIA
> >
> >
>
>

Javier
Sun Jul 20 11:06:47 CDT 2003

Maybe you are doing something wrong at a different level...

For example, you cannot join a WinXP Home computer to the SBS domain... so
I'm not sure how you added them.

-Javier


"Tony Josephs" <nospam2tony_josephs@hotmail.no.spam.com> wrote in message
news:bfee26$rir$1@titan.btinternet.com...
> Thanks Roger.
>
> Yes I have both the Firewall Client on the desktops _and_ the Proxy
settings
> as you have described.
>
> Is it a question of one or other? I have them both at the same time.
>
> TIA
>
>
>
> Tony
>
>
>
> "Roger Crawford" <rcrawford@scci.com> wrote in message
> news:%23iaivUtTDHA.2180@TK2MSFTNGP10.phx.gbl...
> > Have you installed the Firewall CLient on the desktops? Or you can go to
> > your IE and Under Tools then internet Options and then LAN Settings down
> to
> > the bottom where you see Proxy Settings add your server name and port
8080
> > and then check the box Bypass Proxy Server for Local Addresses.
> >
> > Roger Crawford
> > HTS
> >
> > "Tony Josephs" <nospam2tony_josephs@hotmail.no.spam.com> wrote in
message
> > news:OgCd5ssTDHA.3700@tk2msftngp13.phx.gbl...
> > > Having now successfully added XP (home) and 9.x clients to my first
SBS
> > 2000
> > > server I cannot seem to get internet access to happen by allowing
access
> > > through ISA to members of the 'BackOffice Internet Users' group.
> > >
> > > I have a single BackOffice Internet Access Protocol rule which has to
be
> > set
> > > as follows to work
> > >
> > > - protocol = all IP traffic
> > > - applies to = Any request
> > >
> > > If I set the "applies to" to 'DOMAIN\BackOffice Internet Users' and
> > > "protocol" to 'all IP traffic' clients can get HTTP access but no NNTP
> or
> > > POP3 access. If I try to select certain IP filters eg NNTP there
seems
> to
> > > be no effect.
> > >
> > > I am stumped as to why this happens and I understand that with access
> set
> > > this way my server is not as secure as it could be.
> > >
> > > I am under the assumption that
> > >
> > > - users are members of 'BackOffice Internet Users'
> > > - internet access is granted through ISA to ''BackOffice Internet
Users'
> > > - so clients should be able to access the Internet according to the IP
> > > packet filters that have been selected (in my case only all IP traffic
> > seems
> > > to work)
> > >
> > > I have full patches applied according to hfnetchk pro4.
> > >
> > > Can anyone point me in the directions of some help?
> > >
> > >
> > > TIA
> > >
> > >
> >
> >
>
>

Roger
Sun Jul 20 16:46:44 CDT 2003

When I said able to run both I was refering to the Firewall Client and the
settings in IE.


"Roger Crawford" <rcrawford@scci.com> wrote in message
news:OS3cl3vTDHA.1552@TK2MSFTNGP12.phx.gbl...
> OK have you went through the ICW and allowed the access to the outside
> world. Setup your method of email and where it says ISA, configured that
for
> what you need say email and TS if you are running that? You on a dial up
or
> full time connection. You can run both on the computers with no problems.
> Can you ping the outside world?
>
> Roger Crawford
> HTS
>
> "Tony Josephs" <nospam2tony_josephs@hotmail.no.spam.com> wrote in message
> news:bfee26$rir$1@titan.btinternet.com...
> > Thanks Roger.
> >
> > Yes I have both the Firewall Client on the desktops _and_ the Proxy
> settings
> > as you have described.
> >
> > Is it a question of one or other? I have them both at the same time.
> >
> > TIA
> >
> >
> >
> > Tony
> >
> >
> >
> > "Roger Crawford" <rcrawford@scci.com> wrote in message
> > news:%23iaivUtTDHA.2180@TK2MSFTNGP10.phx.gbl...
> > > Have you installed the Firewall CLient on the desktops? Or you can go
to
> > > your IE and Under Tools then internet Options and then LAN Settings
down
> > to
> > > the bottom where you see Proxy Settings add your server name and port
> 8080
> > > and then check the box Bypass Proxy Server for Local Addresses.
> > >
> > > Roger Crawford
> > > HTS
> > >
> > > "Tony Josephs" <nospam2tony_josephs@hotmail.no.spam.com> wrote in
> message
> > > news:OgCd5ssTDHA.3700@tk2msftngp13.phx.gbl...
> > > > Having now successfully added XP (home) and 9.x clients to my first
> SBS
> > > 2000
> > > > server I cannot seem to get internet access to happen by allowing
> access
> > > > through ISA to members of the 'BackOffice Internet Users' group.
> > > >
> > > > I have a single BackOffice Internet Access Protocol rule which has
to
> be
> > > set
> > > > as follows to work
> > > >
> > > > - protocol = all IP traffic
> > > > - applies to = Any request
> > > >
> > > > If I set the "applies to" to 'DOMAIN\BackOffice Internet Users' and
> > > > "protocol" to 'all IP traffic' clients can get HTTP access but no
NNTP
> > or
> > > > POP3 access. If I try to select certain IP filters eg NNTP there
> seems
> > to
> > > > be no effect.
> > > >
> > > > I am stumped as to why this happens and I understand that with
access
> > set
> > > > this way my server is not as secure as it could be.
> > > >
> > > > I am under the assumption that
> > > >
> > > > - users are members of 'BackOffice Internet Users'
> > > > - internet access is granted through ISA to ''BackOffice Internet
> Users'
> > > > - so clients should be able to access the Internet according to the
IP
> > > > packet filters that have been selected (in my case only all IP
traffic
> > > seems
> > > > to work)
> > > >
> > > > I have full patches applied according to hfnetchk pro4.
> > > >
> > > > Can anyone point me in the directions of some help?
> > > >
> > > >
> > > > TIA
> > > >
> > > >
> > >
> > >
> >
> >
>
>