• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 17408
  • Last Modified:

HTTP Error 403.6 - Forbidden: IP address of the client has been rejected when accessing RWW

I have an SBS2003 server with 2 NIC's and which sonnect to the internet via a cisco 1600 router. Have run the wizards to allow remote access. I need to be able to access this server from any pc which has access to the internet as I work worldwide. When at home I connect to the internet and type in i.e. http:\\IP address of the external NIC and get the following screen.

Welcome to Windows Small Business Server 2003
 To get started, click a link.


  My Company's Internal Web Site
 Collaborate and share documents on your company's internal Web site.
   
  Network Configuration Wizard
 Join a client computer to the Windows Small Business Server network.
   
  Remote Web Workplace
 Connect to the Windows Small Business Server network over the Internet.
   
  Information and Answers
 Learn more about Windows Small Business Server.

When I click on "Remote Web Workplace" I get the following error.

You are not authorized to view this page
The Web server you are attempting to reach has a list of IP addresses that are not allowed to access the Web site, and the IP address of your browsing computer is on this list.
--------------------------------------------------------------------------------

Please try the following:

Contact the Web site administrator if you believe you should be able to view this directory or page.
HTTP Error 403.6 - Forbidden: IP address of the client has been rejected.
Internet Information Services (IIS)

I have gone into the properties of routing & remote access and tried to change the ip adress range, but this doesn't seem to help.

What can I do to try and fix this problem?
0
Tonymorison
Asked:
Tonymorison
3 Solutions
 
suppsawsCommented:
Hi Tonymorison,

are the users connected via dhcp?
did you add the users via the http://server/connectcomputer wizard?
Did you install asp.net 2.0?


Cheers!
0
 
suppsawsCommented:
Tonymorison,

btw, does it work internally?
Make sure the following ports are open on your router:
25 - SMTP
443 - HTTPS (for RWW and OWA)
444 - SharePoint
1723 - PPTP VPN
3389 - RDP for remote administration
4125 - Remote Web Workplace

0
 
TonymorisonAuthor Commented:
The machines on that local network  are getting ip address via DHCP, but imagine if I were on holiday and wanted to access mys sbs server from a public pc in an internet cafe`.
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
suppsawsCommented:
Tonymorison,

the correct link for rww is:
httpS://fqdn/remote
0
 
TonymorisonAuthor Commented:
It works great internally. I have no probelms. My router is very basic it has no firewall settings. The only firewall I have is the sbs built in firewall and I have my entire website open. I just need to get it to work before I start setting up my secuirty
0
 
suppsawsCommented:
Tonymorison,
> The machines on that local network  are getting ip address via DHCP,
> but imagine if I were on holiday and wanted to access mys sbs server
> from a public pc in an internet cafe`.

That is nu problem, I suppose you have a fixed WAN ip on your server?
Then you can create an a-record, eg: sbs.yourdomainame.com which points to your public ip
That makes it easier for the users, they just have to type https://sbs.xxx.com/remote

0
 
suppsawsCommented:
Tonymorison,

check if port 443 and 4125 are open, else you won't be able to connect to RWW
The page you got first goes via port 80, that is why you can connect to it.
0
 
TonymorisonAuthor Commented:
When I click on Remote web workplace it redirects to https:\\ipaddrs\remote. I am not using a fqdn, as I am not publishing my website.
0
 
suppsawsCommented:
Then make sure these things are fine:

- port 443 and 4125 are open
- make sure you certificate is correct
- make sure you have no ip address restrictions on IIS
- make sure you checked the right boxed on the remote access wizard
0
 
dhoustonieCommented:
Hi Tony,
Rerun the internet connection wizard from the Server Management tool, and change the firewall settings to allow you access to Remote Web Workplace.
TechSoEasy has a good link to more detail on the wizard, I just don't have it to hand.
What sounds like the issue is that the  RWW folder is still locked down in IIS to only the Server and internal ip addresses, to change this you need to rerun the wizard.
Thank you,
David
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Tony,

You should NOT access your SBS with that web page (the one that looks like this:  http://sbsurl.com/welcomepage.jpg).  This page is designed for internal use only.  So, pretty much what suppsaws and dhoustonie have said are correct... I'll just give you the how-to's.

What you want to use for access is "Remote Web Workplace".  You'll find complete details for that at http://sbsurl.com/rww

To make this work, you need to run the Configure Email and Internet Connection Wizard (CEICW -- which is linked as Connect to the Internet in the Server Management Console > Internet and Email)

A visual how-to is here:  http://sbsurl.com/ceicw and a full networking overview for SBS is at http://sbsurl.com/msicw

Within that wizard you'll see a "more information" button on each screen that has invaluable help in deciding which options to select.  
Be sure to check those out as well.

In each of the CEICW's sections, you have the option to choose "Do not Configure".  Don't choose that option, because you need to have it configure EVERY section.

For the Security Certificate screen, you should enter the External Static IP Address.

On the Web Services Configuration Screen, select every item except the last one, "Business Web Site (wwwroot)".  This will close up port 80 for you which is a good thing... so you won't be able to go to http://IPADDRESS anymore.  Instead you'll use https://IPADDRESS/remote.

Finish up the wizard and you should be able to connect just fine.  If you still have the problem, then the security settings on the Remote Web Workplace's web site needs to be manually changed.  Please post back if this is the case and I can provide instructions.

A couple of notes:
1.  You really do need to put a router/firewall between your SBS and your Internet connection.  
2.  You can also access your server's desktop via Remote Desktop Connection from any machine running Windows XP.  You'll find that in  START > All Programs > Accessories > Communication.  

Jeff
TechSoEasy
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now