Help! SBS 2003 - Can only view HTTPS Pages

[BaconBonce]

Ok, I think I'm going mad - been looking at this all evening and I think I'm overlooking something really straightforward.

Have an SBS 2003 R2 server here which has just been configured with SSL for remote access to Outlook Web Access.

Since this has been configured (just using the "Connect to the Internet" wizard), the only sites you can browse to on the server are https sites - any other "normal" http sites come back with "Page cannot be displayed" messages.

I've now disabled SSL again, but the problem is still apparent. Anyone got any ideas???

I can ping and trace http sites and they resolve, there is no ISA on this box - it's going through a separate firewall and all outbound traffic is currently being allowed.

No proxy server set in IE - it all worked prior to the SSL config.

Any help greatly appreciated.

Cheers

Paul

[sneakyneil]

Sorry, you're browsing to sites hosted on the sbs box from another machine on the lan or you're browsing t'interweb from the sbs box?

[BaconBonce]

Hi Neil,

I'm browsing on the SBS box (testing), but the PC's on the network have the same problem as they are going through the server - no web access unless it's an https site

Again, they were all working prior to the SSL work, but I've reversed that.

Is there anything in IIS that can cause the problem as that ties in to SSL.

Edited by BaconBonce on Tuesday 16th January 23:50

[sneakyneil]

weirdness

Has the 2k3 built in firewall been enabled, if so is it blocking port 80? Thats the first thing that springs to mind if port 443 traffic works but 80 doesnt. You can try telneting to servers on port 80 and port 443 from a command prompt to confirm/rule out an IE config problem vs firewall issue. (or try firefox )

Hope this helps, if not, I'm sure the answer will come to you in your sleep!

[BaconBonce]

No, already checked - the Windows firewall isn't up and running.

Completely stumped at the moment

[sneakyneil]

What does telnet say? If you go

telnet news.bbc.co.uk 80

do you get a connection (a blank screen or some stuff about http), or just 'connect failed'?
does pop3 or smtp work?

eta, www.rbsdigital.com is a good one to test, you should be able to connect to to it on both 80 and 443.

Off to bed now, good luck!

Edited by sneakyneil on Wednesday 17th January 00:14

[BaconBonce]

Can telnet to both port 80 and 443 (get blank screens for both)

Both POP3 and SMTP are working perfectly.

I think I'll sleep on it also and worry about it tomorrow.

Thanks for your help

Paul

Edited by BaconBonce on Wednesday 17th January 00:33

[SneakyNeil]

BaconBonce said:

Can telnet to both port 80 and 443 (get blank screens for both)

99% Deffo 'just' an IE config problem then! Could verify this by temporarily installing firefox?

[BaconBonce]

Hi Neil,

Yes I think I'm going to have to do that as it is looking like something in IE, although not sure why the client PC's on the network would stop working also as I haven't touched them.

Going to have to visit site to put Firefox on though as - again weirdly I was using RDP to the server last night without any problems so it appears to be just http traffic giving cause for grief.

Thanks again

Paul

[roadsweeper]

This might sound stupid, but have you tried restarting the box? We've found that some firewall and SSL settings appear to have taken affect immediately but actually don't until the box is restarted. A long shot, but worth a pop.

[BliarOut]

Client PC's affected... Restart/double/treble check the firewall too.

[SneakyNeil]

BaconBonce said:

Hi Neil,

Yes I think I'm going to have to do that as it is looking like something in IE, although not sure why the client PC's on the network would stop working also as I haven't touched them.

A group policy setting? Don't ask me which one mind...

[BaconBonce]

BliarOut said:

Client PC's affected... Restart/double/treble check the firewall too.

Server has been rebooted (several times now) all the references to SSL have been removed (that I can find).

Double checked the firewall - it's allowing absolutely everything through and I temporarily disabled it completely without success.

Can still ping and do successful traces to any site by name or IP and can telnet to both port 80 and 443 successfully.

Still only https site are viewable, https://www.rbsdigital.com displays perfectly where as www.rbsdigital.com gives a "Cannot find server" error.

I did think it maybe a BT issue, but there are no known problems in the area and it seems too much of a coincidence that I was working on the SSL stuff prior to it giving grief.

[BaconBonce]

SneakyNeil said:

A group policy setting? Don't ask me which one mind...

No policies have been configured yet, unless the wizard implements something without telling you.

I will have a check through the policies later just in case.

[arcturus]

Whenever I have come across this problem in Win XP, it has usually been caused by a winsock error and can be fixed by running WinSockFix XP. I know you are running SBS 2003 but it might be a clue.

Also are you running SBS Standard or Premium edition? Premium includes ISA Server 2004 which could also be causing the problem you mention.

[BaconBonce]

arcturus said:

Whenever I have come across this problem in Win XP, it has usually been caused by a winsock error and can be fixed by running WinSockFix XP. I know you are running SBS 2003 but it might be a clue.

Also are you running SBS Standard or Premium edition? Premium includes ISA Server 2004 which could also be causing the problem you mention.

Thanks for that, will take a look as I'm popping out there this evening.

Although it's the Premium version, ISA hasn't been installed.

[BliarOut]

Rerun the wizard? Sometimes those wizards are none too clever!


Look at it logically. Is the firewall connected into the same switch as the server or does the server have two network cards? (transparent proxy)?

Normally I'd say what you describe is a firewall issue as all machines are affected but in this case I wouldn't be surprised if there's an AD setting lurking somewhere.

[BaconBonce]

Yeah, re-run the wizard thinking it might fix any issues, but same problem.

It does at the end of the wizard when it's making the changes, it does say configuring the firewall, but have triple checked and the windows firewall is turned off and the service is disabled.

I've had a quick look through group policy and the firewall settings are enabled, but am not going to tinker with any settings until onsite this evening.

I tend to agree - on first impression is does look firewall related, but can't see how at the moment.

The firewall that is being used is combined in the adsl router - a BT business hub and the server is connected to one of the built-in ethernet ports.

Am going to bypass the server later with a PC and see if I can get a connection straight out. Pretty sure if I can get web going on the server, the PC's will follow.

Thanks for all the suggestions so far - any more very welcome! )

[SneakyNeil]

Post back when you find the answer, this is an interesting one!

[BaconBonce]

SneakyNeil said:

Post back when you find the answer, this is an interesting one!

I just know it's going to be something stupid, but will post an update later tonight.