Browse Problem

Can someone help me with this...

I have a 2003 server that is sat in our DMZ and for the last few days my
backup (veritas) server hasnt been able to see it. Our webmaster went thru a
session of hardening up the server as we were recently hacked and used as a
FTP distro, but I think he went completely overkill and now the server can
not been seen by normal browsing, which means veritas cannot back it up.

What needs to be open/enable so that the servers can see each other, i.e.
ports etc.

This server hasnt had a backup for a while and is in bad need of one, I have
been trying things but with no sucess.

Cheers...

Sounds like he disabled NetBIOS over TCP/IP which
is required for browsing to occur.

"Derrick Denley" <(E-Mail Removed)> wrote in message news:
> Can someone help me with this...
>
> I have a 2003 server that is sat in our DMZ and for the last few days my
> backup (veritas) server hasnt been able to see it. Our webmaster went thru
a
> session of hardening up the server as we were recently hacked and used as
a
> FTP distro, but I think he went completely overkill and now the server can
> not been seen by normal browsing, which means veritas cannot back it up.
>
> What needs to be open/enable so that the servers can see each other, i.e.
> ports etc.
>
> This server hasnt had a backup for a while and is in bad need of one, I
have
> been trying things but with no sucess.

This has been enabled on the server and this didnt make any difference.

Not sure what he acutally did, I know he was following the microsoft
baseline security paper to harden the IIS side of the server, but this seems
have totally isolated it.

"Michael Giorgio - MS MVP" <(E-Mail Removed)> wrote in
message news:%(E-Mail Removed)...
> Sounds like he disabled NetBIOS over TCP/IP which
> is required for browsing to occur.
>
> "Derrick Denley" <(E-Mail Removed)> wrote in message news:
>> Can someone help me with this...
>>
>> I have a 2003 server that is sat in our DMZ and for the last few days my
>> backup (veritas) server hasnt been able to see it. Our webmaster went
>> thru
> a
>> session of hardening up the server as we were recently hacked and used as
> a
>> FTP distro, but I think he went completely overkill and now the server
>> can
>> not been seen by normal browsing, which means veritas cannot back it up.
>>
>> What needs to be open/enable so that the servers can see each other, i.e.
>> ports etc.
>>
>> This server hasnt had a backup for a while and is in bad need of one, I
> have
>> been trying things but with no sucess.
>
>

Open a dos prompt on the server and run net view.
What do you see? Next open a dos prompt and
run: net config server and verify the hidden field says
no.

"Derrick Denley" <(E-Mail Removed)> wrote in message news:
> This has been enabled on the server and this didnt make any difference.
>
> Not sure what he acutally did, I know he was following the microsoft
> baseline security paper to harden the IIS side of the server, but this
seems
> have totally isolated it.
>
> "Michael Giorgio - MS MVP" <(E-Mail Removed)> wrote in
> message news:
> > Sounds like he disabled NetBIOS over TCP/IP which
> > is required for browsing to occur.

Net view returns no entries in the list and the hidden setting is saying no.
it shouldnt be hidden as I did change the NETBIOS over TCPIP so that it was
enabled.

"Michael Giorgio - MS MVP" <(E-Mail Removed)> wrote in
message news:(E-Mail Removed)...
> Open a dos prompt on the server and run net view.
> What do you see? Next open a dos prompt and
> run: net config server and verify the hidden field says
> no.
>
> "Derrick Denley" <(E-Mail Removed)> wrote in message news:
>> This has been enabled on the server and this didnt make any difference.
>>
>> Not sure what he acutally did, I know he was following the microsoft
>> baseline security paper to harden the IIS side of the server, but this
> seems
>> have totally isolated it.
>>
>> "Michael Giorgio - MS MVP" <(E-Mail Removed)> wrote in
>> message news:
>> > Sounds like he disabled NetBIOS over TCP/IP which
>> > is required for browsing to occur.
>
>

That doesn't hide the computer specifically it prevents
the machine from showing up in the list but it doesn't
specifically hide the PC. Net config server / hidden yes
tells the machine not to make it's presence known on
the network. Machines will send a host name announcement
packet to the SMB / segment master browser during bootup
at increasing intervals leveling out at every 12 minutes.
"Derrick Denley" <(E-Mail Removed)> wrote in message news:#...
> Net view returns no entries in the list and the hidden setting is saying
no.
> it shouldnt be hidden as I did change the NETBIOS over TCPIP so that it
was
> enabled.

>

In order to futher troubleshoot your issue it's
necessary to go over your setup. The backup
server is where in relation to the problem machine?
What method of name resolution is in place e.g.,
WINS, DNS, both?

"Derrick Denley" <(E-Mail Removed)> wrote in message news:
> Net view returns no entries in the list and the hidden setting is saying
no.
> it shouldnt be hidden as I did change the NETBIOS over TCPIP so that it
was
> enabled.
>

Hi Michael,

If the server is in a DMZ, I suspect the problem is that the
firewall between the LAN and the DMZ has had the Netbios ports blocked in
the security clampdown, and the backup server is on the LAN.

Michael Giorgio - MS MVP wrote:
> In order to futher troubleshoot your issue it's
> necessary to go over your setup. The backup
> server is where in relation to the problem machine?
> What method of name resolution is in place e.g.,
> WINS, DNS, both?
>
> "Derrick Denley" <(E-Mail Removed)> wrote in message news:
>> Net view returns no entries in the list and the hidden setting is
>> saying no. it shouldnt be hidden as I did change the NETBIOS over
>> TCPIP so that it was enabled.

I agree.

"Bill Grant" <not.available@online> wrote in message news:
> Hi Michael,
>
> If the server is in a DMZ, I suspect the problem is that the
> firewall between the LAN and the DMZ has had the Netbios ports blocked in
> the security clampdown, and the backup server is on the LAN.
>
> Michael Giorgio - MS MVP wrote:
>> In order to futher troubleshoot your issue it's
>> necessary to go over your setup. The backup
>> server is where in relation to the problem machine?
>> What method of name resolution is in place e.g.,
>> WINS, DNS, both?
>>
>> "Derrick Denley" <(E-Mail Removed)> wrote in message news:
>>> Net view returns no entries in the list and the hidden setting is
>>> saying no. it shouldnt be hidden as I did change the NETBIOS over
>>> TCPIP so that it was enabled.
>
>

Agreed except he said the web master hardened the
server which gives me no reason to believe the web
master doubled as the admin / network engineer
and reconfigured the firewall but it is possible.

"Bill Grant" <not.available@online> wrote in message
news:#(E-Mail Removed)...
> Hi Michael,
>
> If the server is in a DMZ, I suspect the problem is that the
> firewall between the LAN and the DMZ has had the Netbios ports blocked in
> the security clampdown, and the backup server is on the LAN.
>
> Michael Giorgio - MS MVP wrote:
> > In order to futher troubleshoot your issue it's
> > necessary to go over your setup. The backup
> > server is where in relation to the problem machine?
> > What method of name resolution is in place e.g.,
> > WINS, DNS, both?
> >
> > "Derrick Denley" <(E-Mail Removed)> wrote in message news:
> >> Net view returns no entries in the list and the hidden setting is
> >> saying no. it shouldnt be hidden as I did change the NETBIOS over
> >> TCPIP so that it was enabled.
>
>