How do you change Firewall rules etc. on Windows Server 2003 ? It seems like we have no additional firewall software running and its running ISA server.

So where do I change firewall options?

sure you dont have a hardware firewall hidden somwhere?

Nope, BT Openworld runs straight into the server.

My problem is that it seems to be blocking my connection to the folding results and W/U server. I am looking for a way to add IP addresses to an "allowed" list.

This isnt just a folding issue (mods please note) but a general I.T. query.

Had another look, there seems to be nothing in the way of firewall software - but I assume there will be something as standard on the OS?

I've found "Default Domain Security Settings" in "Control panel> admin tools" which has various options such as "IP security policies on Active Directory" and "software restriction policies" - none of these seem to have any settings for restricting or allowing sites or IP addresses.

I routed past the whole ISA thing in my previous work, which was a bit of a cheat.

Annoyingly I never got round to playing about with ISA before I left that company :(

Erm i have a suggestion but you may not like it.

Turn off windows firewall in win2k3 (The advanced tab on the network connection)

Have a hardware firewall or linux box sat between you and your net connection doing the firewall.

When you say BTOpenwoe runs straight into the server what do you mean?

The phoneline will either have to run into an ADSL modem in the machine or a router device and then over ethernet into your server.

The phone line comes in to the free router BT send you when you sign up for OpenWorld. This then has a cable to the server.

Is there a way to find the IP address of the router so I can check any setup utility it may have (in the way my router at home does)

The phone line comes in to the free router BT send you when you sign up for OpenWorld. This then has a cable to the server.

Is there a way to find the IP address of the router so I can check any setup utility it may have (in the way my router at home does)

Do an ipconfig /all and it'll tell you the address of the DHCP server that allocated your IP address which will be BT's router

The DHCP server is given as 10.0.0.2 which, is the server.

Hmmm , very odd

Not that odd. It just means that the DHCP and probably DNS is provided locally by the server. If it is running ISA, then it is probably set as the default gateway as well....

win2003 server's firewall is basically iptables. not sure from memory where it's hidden, but poke about for iptables and you'll find it...

I.P. Tables ??

Goochie, which version of ISA server. They should both have an administration program in something like C:\program files\Microsoft ISA server.

There are 2 versions 2000 and 2004. The earlier is much easier to configure than 2004.

Version 3.0.1200.255

There are a number of "folders" with options in them in the left hand pane - However none of these seem to be what I'm looking for.

Version 3.0.1200.255

There are a number of "folders" with options in them in the left hand pane - However none of these seem to be what I'm looking for.

So thats ISA 2000. The admin interface is an MMC snapin.

Start > run > mmc . then click file > add remove snapin and add ISA Management.

It's snapped-in - but now what?

Look under Access policy, site and content rules. a rule should appear in the right hand window. Do properties and see what is says.

Small business server internet access site and content rule

Scope "array" - Action "allow" - destination "all external" - content "all

Small business server all user site and content rule

Scope "array" - Action "allow" - destination "small business server update sites" - content "all

Allow rule

Scope "array" - Action "allow" - destination "all external" - content "all

Do you know the model of router BT supplied - quite a few routers have built-in firewall capability which could be configured to restrict inbound/outbound traffic....

Chris

Had a poke around and found the information I was given was a load of rubbish - Found a NetGear ADSL router - sadly I dont know what it's IP address is to check the settings :(

Had a poke around and found the information I was given was a load of rubbish - Found a NetGear ADSL router - sadly I dont know what it's IP address is to check the settings :(

Do a tracert to www.google.com. It should show you the path it takes and one of them will be the router

Chris

Small business server internet access site and content rule

Scope "array" - Action "allow" - destination "all external" - content "all

Small business server all user site and content rule

Scope "array" - Action "allow" - destination "small business server update sites" - content "all

Allow rule

Scope "array" - Action "allow" - destination "all external" - content "all

Those rules look fine and appear to be blocking nothing.

got it - 192.168.0.1

Not set to block anything or restrict anything :(

Strange thing is that it can access the required server when I open an IE window.

iptable is the linux replacement for ipchains.

ISA sure as hell isn't IPtables. It might have a similar set up but iptables is linux.

To connect to your rounter open up a web-browser and connect to http://192.168.0.1

and this should open up your routers web admin interface.

Also if it's a router it will have either a NAT firewall, or an SPI firewall in it. You may just be seeing problems due to NAT if you are using the router then that will take up an IP address.

You will be able to set all of this through the web interface.

Adding to this after seeing second page:

Are you trying to go throught ISA, if so it acts as a proxy server, so the PC will be auto setup when using IE, but outside of IE you will need to set up the proxy server settings.