Solved

Blackberry firewall NAT issues

Posted on 2006-10-31
4
920 Views
Last Modified: 2008-02-01
Hi Guys


I installed BlackBerry Ent Server on Friday. Completed all the dos and donts. Was able to register a device with it. Downloaded and sent mails from the device repeatedly.

On getting to office monday, I see the device I switched off was still running but last update was friday. Tried sending mails but couldn't from the blackberry device. Sent Email from the server.

Server is in DMZ. can ping all internal network but cant ping anything on the internet. Testing the router I get connection timeout 10060.

I am unable to connect to the internet. The firewall is as I set it on friday. This is driving me mad. Does anyone have an idea what could have stopped this server from working?


I noticed that as soon as I nat the DMZ ip address on the firewall, the Blackberry server will no longer connect to the internet and tine out on ping requests. Does anyone know how to work around this issue?

Thanks
0
Comment
Question by:zazanwunyephilip
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 17844333
Where is your Exchange server? Is that in the DMZ as well?

Blackberry is all push, the BES makes a connection to the servers at RIM. I have not had to make a single firewall change for inbound traffic for a BES for all those that I have setup. That of course depends on your firewall setup.

On that basis I wonder why you have put the BES in the DMZ. The Blackberry devices don't connect to it directly, and it doesn't need to be exposed to the internet to operate.

Simon.
0
 

Author Comment

by:zazanwunyephilip
ID: 17853022
Sweethearts,

I figured it all out without succumbing to a panic attack!!!!. Its all working now. I just opened port 3101 from the firewall using any to the srp on 3101 rather than exposing the BES to the internet.

I am going through the security policies to tighten it all up.

At the moment I am just having small issues with https but will continue tomorrow.

Its so wonderful to partner with you guys.

Thanks
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 18082124
PAQed with points refunded (250)

Computer101
EE Admin
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question