Setting up SBS 2003 with 2 NIC

[Mr. Gupta]

Hi,

I want a SBS 2003 Premium setup with the best possible security and the following functions or Setup:

- Fixed IP address from the provider
- POP3 mailboxes (unfortunately, the provider does not have to SMTP)
- VPN access from outside corporate network
- Outlook Sync RPC HTTP externally with the Exchange Server
- The usual things such as mail (SMTP, POP3), MSN Messenger, Skype (including VOIP) will naturally go.

Set up:
SBS2003 Premium with 2 NICs.

Now my questions:
- Can I setup on any security?
- Where should the DNS and DHCP servers for the corporate network "lie"? At the DSL router or on the SBS2003? (ie, either the router must then always pass or just the SBS2003)?
- What ports need to as the DSL router will be forwarded or registered, so that the things towork at SBS (VPN, Outlook, RPC, Skype, etc.)?

Many thanks for your help in advance!

[Rasdasa]

Yes, Internet-facing NIC are permitted only to have the necessary services. DNS and DHCP are on the server, then this should be hedged against default (Redundant hardware and a full backup).

In Nat guided to the server and port filtering / SIF to consider:

Port 443 for PPC Outlook over HTTP (s)
Port 25 for SMTP
Port 110 for POP3 or better 995 for POP3 (SSL)
Port 143 for IMAP or 993 for better IMAP (SSL)
Port 389 for LDAP or better for 636 LDAP (SSL) - wg. Global Address List

Skype / VoIP / Messenger - do you want a Skype or Messenger server?

About port 443 you can, be provided enabled mobiles, mobiles also serve on Active Sync.

[SergioSantos]

If you really have a hub in the LAN, can quickly exchange. For the external network (routers and Nic1 from the server) or for the internal network (Nic2 - Switch) IP range to choose which is far apart (eg, 10.100.74.0, 192.168.123.0). So to get through rates are not as fast on the addresses.

DNS, DHCP, I would direct to the server pack. So that you can easily set with the DNS as the router NEXT DNS. Then you have your network but completely rebuilt first, because as outlined above, each client goes through the server to the Internet. Moreover, if the server fails, the client ran on no data. So I think the Internet is no longer relevant.

Therefore I would suggest you min. in a RAID 1 server, UPS for the server and an external disk or tape drive.

[TX-Snakebyte]

You mean the MX record. Then I would suggest you an extra POP3 Connector to buy (eg POPCon - very good tool). Because M $ has a drawback, is the mailbox of user "x" times do not exist, the mail is lost (not recover)!

These things you will be in the ISA firewall by Directive have to define exactly. Because ISA 2006, all prohibited by default!