Re: fileshare on my website

if the website is visible on the internet side of the router then you have
the right ports open... for a normal site that means only port 80 and only
to the web server machine.

the question is, what is the difference between the pages the outside world
can open and the pdf's they can't open. i am assuming that since you
mention fileshares in the subject and included the sbs machine in the
configuration in question that the pdf files are in a shared directory on
the sbs machine. the most likely problem in this case is that the anonymous
internet account does not have access to the share on the sbs machine. when
you are accessing the pdf's locally you are using your local login
credentials which most likely do have access to the files in the share. if
these are correct assumptions you have basically 2 options. you could give
the anonymous internet account read access to the share, or you could copy
the documents you want outside users to see to somewhere on the web server
that they already have access to. i prefer the second method, keep
anonymous users confined to the web server as much as possible. this
normally means making a copy of what you want to expose and keeping the
original safely tucked away somewhere else.

"Nigel.UK." <NigelUK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
I am running wsbs2003sp1 on one machine and w2003sp1 and iis on my web
server. My website is visible on the www but clients cannot open pdf
documents, which i can open in my own browser.
apparently ipnat.sys is running on the wsbs machine and windows firewall
the web server. I have tried opening various ports on the web server and
the dsl router. Please advise me how to safely allow anonymous internet
browsers to open / download documents from links on my website.



Relevant Pages

  • Re: Webserver, DMZ, ports questions
    ... Internet accesible services like SMTP have a seperate ... DMZ or a third interface in the firewall. ... As far as source / destination ports goes. ... from the internet to my web server, ...
  • Re: Using SBS 2003 for all remote access.
    ... Yes of course only the ports needed ... the firewall config or will the wizard handle this for me ... >> the web side of the SBS machine via the firewall anyway ... >You would not want to allow all ports from the Internet ...
  • Re: Accessing server in DMZ
    ... workaround unless internet users are using VPN to access the web server. ... This might be a silly question but do the LAN users need to connect to the ...
  • Re: Mutilple domain names on SBS
    ... So maybe the SBS machine ... > connections and OWA because those ports might not be safe ... > NIC with internet connectivity. ...
  • Re: port forwarding on LInkSys wireless routers
    ... LinkSys Wireless G Broadband Router with SpeedBooster, WRT54GS, ... I want to open up ports 80, 21, and 22. ... That's the Web server, O/S, file system, user accounts, etc that have not been harden to attack for a machine that's facing the Internet. ...