Hi All,

 

English is not my language so I hope to make myself clear...

 

This is the scenario:

 

1) DSL1 (fixed IP) --> FIREWALL --> SBS 2003 PREMIUM R2 (192.168.16.x) --> CLIENTS (10 clients which use all the SBS services, Exchange email, and internet surfing)

2) DSL2 (fixed IP) --> 2003 STANDARD EDITION (used to host a couple of web sites so the full bandwith is used for external users to visti the web sites)

 

I need to configure the servers so that:

 

1) SBS users can get access to the WEB SERVER (#2) for internal web site (custom CRM) and SQL database.

2) I want to be sure that SBS users do not use ADS2 for Internet, I need the full bandwith for external customers to get access to the web sites.

3) I can send emails from the hosted web sites using Exchange installed on SBS (#1).

4) My email domain refers to the SBS IP (#1) but I also may send email using the same domain form the WEB IP (#2) (I know can modify the SPF record to include IP #2).

 

I'm trying to solve this puzzle since a couple of days but didn't come up with a decent solution, I will really appreciate if someone can help me.

 

Thanks

 

Tiziano

Hi Tiziano,

Did you figure this out yet?

Hi Marina,

 

Right now the WEB server is not connected to the SBS network, so it is serving web pages through the dedicated DSL connected on the NIC1.

Next week, I want to connect the WEB server to the SBS network through the NIC2, then I have to figure out what to do :)

Hi Tiziano,

 

Bad idea, as a webserver should never be connected to the SBS network directly.

Hi Tiziano,

 

You put holes in the firewall that let the necessary ports through from the web server to the sbs server. If the websites are only needed for the internal SBS clients, but only then, you can put the webserver into the sbs network. If you need it for outside external access though, don't even think of putting that webserver into your sbs network.

The WEB server hosts 6 web sites, 2 for internal use only and 4 for external customers.

I know that is really risky to connect it to the SBS network, that's why right now is disconnected, at least until I do not find a way -secure enougth- to do it.