Making changes for new ISP

Hello,
We are currently running Windows Small Business Server 2003 for SBS and
are using ISA Server 2004 and Exchange Server 2003. This server also
stands as the DNS server. We also have another server that is running
Windows Server 2003 Standard and is acting as a web server. We will be
changing internet service providers in the near future, which means we
will have a new static ip address. Once we make the transition, what
changes will need to be made to the servers to ensure that everything
is still working properly?
Thank you,
Aaron

Well, if you have a router sitting between your ISP connector and your SBS
server, you would have to do virtually nothing to the SBS Server.

--
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"


"Aaron" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> Hello,
> We are currently running Windows Small Business Server 2003 for SBS and
> are using ISA Server 2004 and Exchange Server 2003. This server also
> stands as the DNS server. We also have another server that is running
> Windows Server 2003 Standard and is acting as a web server. We will be
> changing internet service providers in the near future, which means we
> will have a new static ip address. Once we make the transition, what
> changes will need to be made to the servers to ensure that everything
> is still working properly?
> Thank you,
> Aaron
>

I'm sure I'll get beat up on for this so excuse the soap box....

Are you suggesting that your SBS 2003 Server is running DNS for external inquiries?
And you have a website running inside your SBS network?

And you have to ask what you need to do since you are changing to a new static IP?

So who set this up for you in the beginning?
How are you connected to the internet? Does your external nic connect directly to your ISP connection? Are you publishing your website using Host Headers in ISA OR does the other server have a public IP address as well as an internal one??

The fact that you need to ask these questions indicates your network may have a significant security risk....

Running a website that is accessible to the public from inside your lan is never a good idea, but if you decide to do it...you need to know how to mitigate the risks.

I would strongly encourage you to partner up with someone local who has a documented history of doing this for other company's (not the "I've set up dozens of websites and they've never been hacked" but rather "Yes, Company A is running their public website inside their lan. I configured and secured it for them. I'd be happy to provide a reference or two" kind of person/company. Make it part of the agreement that they teach as well!


--
Cris Hanna [SBS-MVP]
-----------------------------
Please do not contact me directly, only reply within the Newsgroup
Thanks
--------------------------------
Using Windows Mail on Vista Ultimate
"Aaron" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) ups.com...
Hello,
We are currently running Windows Small Business Server 2003 for SBS and
are using ISA Server 2004 and Exchange Server 2003. This server also
stands as the DNS server. We also have another server that is running
Windows Server 2003 Standard and is acting as a web server. We will be
changing internet service providers in the near future, which means we
will have a new static ip address. Once we make the transition, what
changes will need to be made to the servers to ensure that everything
is still working properly?
Thank you,
Aaron

Okay, we do have a router so I suppose that will make things easier. I
know that I will have to change the WAN settings on the router. This
isn't a major concern. What about the mx records for exchange? I'm not
so familiar with this and it seems that it may be an issue. Also, there
is nothing that needs to be changed in ISA?


Kevin Weilbacher [SBS-MVP] wrote:
> Well, if you have a router sitting between your ISP connector and your SBS
> server, you would have to do virtually nothing to the SBS Server.
>
> --
> Kevin Weilbacher [SBS-MVP]
> "The days pass by so quickly now, the nights are seldom long"
>
>
> "Aaron" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) ups.com...
> > Hello,
> > We are currently running Windows Small Business Server 2003 for SBS and
> > are using ISA Server 2004 and Exchange Server 2003. This server also
> > stands as the DNS server. We also have another server that is running
> > Windows Server 2003 Standard and is acting as a web server. We will be
> > changing internet service providers in the near future, which means we
> > will have a new static ip address. Once we make the transition, what
> > changes will need to be made to the servers to ensure that everything
> > is still working properly?
> > Thank you,
> > Aaron
> >

Thanks for the soap box.

Originally, an outside provider helped with the setup of the currently
configured network.

The external nic connects to a hardware firewall/gateway, not directly
to the ISP connection. The website is indeed published using host
headers in ISA.

It didn't seem that there would need to be many changes for us to
switch to a new ISP.

The only thing that I can see being an issue would be with changing mx
records for exchange.

Is there anything else that needs to be considered?

Thanks again,
Aaron


Cris Hanna [SBS-MVP] wrote:
> I'm sure I'll get beat up on for this so excuse the soap box....
>
> Are you suggesting that your SBS 2003 Server is running DNS for external inquiries?
> And you have a website running inside your SBS network?
>
> And you have to ask what you need to do since you are changing to a new static IP?
>
> So who set this up for you in the beginning?
> How are you connected to the internet? Does your external nic connect directly to your ISP connection? Are you publishing your website using Host Headers in ISA OR does the other server have a public IP address as well as an internal one??
>
> The fact that you need to ask these questions indicates your network may have a significant security risk....
>
> Running a website that is accessible to the public from inside your lan is never a good idea, but if you decide to do it...you need to know how to mitigate the risks.
>
> I would strongly encourage you to partner up with someone local who has a documented history of doing this for other company's (not the "I've set up dozens of websites and they've never been hacked" but rather "Yes, Company A is running their public website inside their lan. I configured and secured it for them. I'd be happy to provide a reference or two" kind of person/company. Make it part of the agreement that they teach as well!
>
>
> --
> Cris Hanna [SBS-MVP]
> -----------------------------
> Please do not contact me directly, only reply within the Newsgroup
> Thanks
> --------------------------------
> Using Windows Mail on Vista Ultimate
> "Aaron" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) ups.com...
> Hello,
> We are currently running Windows Small Business Server 2003 for SBS and
> are using ISA Server 2004 and Exchange Server 2003. This server also
> stands as the DNS server. We also have another server that is running
> Windows Server 2003 Standard and is acting as a web server. We will be
> changing internet service providers in the near future, which means we
> will have a new static ip address. Once we make the transition, what
> changes will need to be made to the servers to ensure that everything
> is still working properly?
> Thank you,
> Aaron

Also cross posting is not recommend

Since you're website is being hosted off that public IP...your www record needs changing as well as reverse DNS, Any A records....in essence any public DNS record that points to your current IP...needs changing

--
Cris Hanna [SBS-MVP]
-----------------------------
Please do not contact me directly, only reply within the Newsgroup
Thanks
--------------------------------
Using Windows Mail on Vista Ultimate
"Aaron" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) ups.com...
Thanks for the soap box.

Originally, an outside provider helped with the setup of the currently
configured network.

The external nic connects to a hardware firewall/gateway, not directly
to the ISP connection. The website is indeed published using host
headers in ISA.

It didn't seem that there would need to be many changes for us to
switch to a new ISP.

The only thing that I can see being an issue would be with changing mx
records for exchange.

Is there anything else that needs to be considered?

Thanks again,
Aaron


Cris Hanna [SBS-MVP] wrote:
> I'm sure I'll get beat up on for this so excuse the soap box....
>
> Are you suggesting that your SBS 2003 Server is running DNS for external inquiries?
> And you have a website running inside your SBS network?
>
> And you have to ask what you need to do since you are changing to a new static IP?
>
> So who set this up for you in the beginning?
> How are you connected to the internet? Does your external nic connect directly to your ISP connection? Are you publishing your website using Host Headers in ISA OR does the other server have a public IP address as well as an internal one??
>
> The fact that you need to ask these questions indicates your network may have a significant security risk....
>
> Running a website that is accessible to the public from inside your lan is never a good idea, but if you decide to do it...you need to know how to mitigate the risks.
>
> I would strongly encourage you to partner up with someone local who has a documented history of doing this for other company's (not the "I've set up dozens of websites and they've never been hacked" but rather "Yes, Company A is running their public website inside their lan. I configured and secured it for them. I'd be happy to provide a reference or two" kind of person/company. Make it part of the agreement that they teach as well!
>
>
> --
> Cris Hanna [SBS-MVP]
> -----------------------------
> Please do not contact me directly, only reply within the Newsgroup
> Thanks
> --------------------------------
> Using Windows Mail on Vista Ultimate
> "Aaron" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) ups.com...
> Hello,
> We are currently running Windows Small Business Server 2003 for SBS and
> are using ISA Server 2004 and Exchange Server 2003. This server also
> stands as the DNS server. We also have another server that is running
> Windows Server 2003 Standard and is acting as a web server. We will be
> changing internet service providers in the near future, which means we
> will have a new static ip address. Once we make the transition, what
> changes will need to be made to the servers to ensure that everything
> is still working properly?
> Thank you,
> Aaron

Okay, what is the best method to make these changes?

I'm not so familiar with this so any help would be greatly appreciated.

Thanks,
Aaron


Cris Hanna [SBS-MVP] wrote:
> Also cross posting is not recommend
>
> Since you're website is being hosted off that public IP...your www record needs changing as well as reverse DNS, Any A records....in essence any public DNS record that points to your current IP...needs changing
>
> --
> Cris Hanna [SBS-MVP]
> -----------------------------
> Please do not contact me directly, only reply within the Newsgroup
> Thanks
> --------------------------------
> Using Windows Mail on Vista Ultimate
> "Aaron" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) ups.com...
> Thanks for the soap box.
>
> Originally, an outside provider helped with the setup of the currently
> configured network.
>
> The external nic connects to a hardware firewall/gateway, not directly
> to the ISP connection. The website is indeed published using host
> headers in ISA.
>
> It didn't seem that there would need to be many changes for us to
> switch to a new ISP.
>
> The only thing that I can see being an issue would be with changing mx
> records for exchange.
>
> Is there anything else that needs to be considered?
>
> Thanks again,
> Aaron
>
>
> Cris Hanna [SBS-MVP] wrote:
> > I'm sure I'll get beat up on for this so excuse the soap box....
> >
> > Are you suggesting that your SBS 2003 Server is running DNS for external inquiries?
> > And you have a website running inside your SBS network?
> >
> > And you have to ask what you need to do since you are changing to a new static IP?
> >
> > So who set this up for you in the beginning?
> > How are you connected to the internet? Does your external nic connect directly to your ISP connection? Are you publishing your website using Host Headers in ISA OR does the other server have a public IP address as well as an internal one??
> >
> > The fact that you need to ask these questions indicates your network may have a significant security risk....
> >
> > Running a website that is accessible to the public from inside your lan is never a good idea, but if you decide to do it...you need to know how to mitigate the risks.
> >
> > I would strongly encourage you to partner up with someone local who has a documented history of doing this for other company's (not the "I've set up dozens of websites and they've never been hacked" but rather "Yes, Company A is running their public website inside their lan. I configured and secured it for them. I'd be happy to provide a reference or two" kind of person/company. Make it part of the agreement that they teach as well!
> >
> >
> > --
> > Cris Hanna [SBS-MVP]
> > -----------------------------
> > Please do not contact me directly, only reply within the Newsgroup
> > Thanks
> > --------------------------------
> > Using Windows Mail on Vista Ultimate
> > "Aaron" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) ups.com...
> > Hello,
> > We are currently running Windows Small Business Server 2003 for SBS and
> > are using ISA Server 2004 and Exchange Server 2003. This server also
> > stands as the DNS server. We also have another server that is running
> > Windows Server 2003 Standard and is acting as a web server. We will be
> > changing internet service providers in the near future, which means we
> > will have a new static ip address. Once we make the transition, what
> > changes will need to be made to the servers to ensure that everything
> > is still working properly?
> > Thank you,
> > Aaron
>
> ------=_NextPart_000_0082_01C6C918.BDF7F5A0
> Content-Type: text/html; charset=iso-8859-1
> Content-Transfer-Encoding: quoted-printable
> X-Google-AttachSize: 5049
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
> <META content="MSHTML 6.00.5536.16385" name=GENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=#ffffff>
> <DIV><FONT face=Arial size=2>Also cross posting is not recommend</FONT></DIV>
> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
> <DIV><FONT face=Arial size=2>Since you're website is being hosted off that
> public IP...your www record needs changing as well as reverse DNS, Any A
> records....in essence any public DNS record that points to your current
> IP...needs changing</FONT></DIV>
> <DIV><BR>-- <BR>Cris Hanna [SBS-MVP]<BR>-----------------------------<BR>Please
> do not contact me directly, only reply within the
> Newsgroup<BR>Thanks<BR>--------------------------------<BR>Using Windows Mail on
> Vista Ultimate</DIV>
> <BLOCKQUOTE
> style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
> <DIV>"Aaron" &lt;<A
> href="private.php?do=newpm&u=">bikefaster@gmai l.com</A>&gt; wrote in
> message <A
> href="news:(E-Mail Removed) glegroups.com">news:1156617557.142039.98160@p79g20 00cwp.googlegroups.com</A>...</DIV>Thanks
> for the soap box.<BR><BR>Originally, an outside provider helped with the setup
> of the currently<BR>configured network.<BR><BR>The external nic connects to a
> hardware firewall/gateway, not directly<BR>to the ISP connection. The website
> is indeed published using host<BR>headers in ISA.<BR><BR>It didn't seem that
> there would need to be many changes for us to<BR>switch to a new
> ISP.<BR><BR>The only thing that I can see being an issue would be with
> changing mx<BR>records for exchange.<BR><BR>Is there anything else that needs
> to be considered?<BR><BR>Thanks again,<BR>Aaron<BR><BR><BR>Cris Hanna
> [SBS-MVP] wrote:<BR>&gt; I'm sure I'll get beat up on for this so excuse the
> soap box....<BR>&gt;<BR>&gt; Are you suggesting that your SBS 2003 Server is
> running DNS for external inquiries?<BR>&gt; And you have a website running
> inside your SBS network?<BR>&gt;<BR>&gt; And you have to ask what you need to
> do since you are changing to a new static IP?<BR>&gt;<BR>&gt; So who set this
> up for you in the beginning?<BR>&gt; How are you connected to the
> internet?&nbsp;&nbsp;&nbsp; Does your external nic connect directly to your
> ISP connection?&nbsp;&nbsp; Are you publishing your website using Host Headers
> in ISA&nbsp; OR does the other server have a public IP address as well as an
> internal one??<BR>&gt;<BR>&gt; The fact that you need to ask these questions
> indicates your network may have a significant security
> risk....<BR>&gt;<BR>&gt; Running a website that is accessible to the public
> from inside your lan is never a good idea, but if you decide to do it...you
> need to know how to mitigate the risks.<BR>&gt;<BR>&gt; I would strongly
> encourage you to partner up with someone local who has a documented history of
> doing this for other company's&nbsp; (not the "I've set up dozens of websites
> and they've never been hacked"&nbsp; but rather&nbsp; "Yes, Company A is
> running their public website inside their lan.&nbsp; I configured and secured
> it for them.&nbsp;&nbsp; I'd be happy to provide a reference or two" kind of
> person/company.&nbsp;&nbsp; Make it part of the agreement that they teach as
> well!<BR>&gt;<BR>&gt;<BR>&gt; --<BR>&gt; Cris Hanna [SBS-MVP]<BR>&gt;
> -----------------------------<BR>&gt; Please do not contact me directly, only
> reply within the Newsgroup<BR>&gt; Thanks<BR>&gt;
> --------------------------------<BR>&gt; Using Windows Mail on Vista
> Ultimate<BR>&gt;&nbsp;&nbsp; "Aaron" &lt;<A
> href="private.php?do=newpm&u=">bikefaster@gmai l.com</A>&gt; wrote in
> message <A
> href="news:(E-Mail Removed) glegroups.com">news:1156615335.674815.301790@75g20 00cwc.googlegroups.com</A>...<BR>&gt;&nbsp;&nbsp;
> Hello,<BR>&gt;&nbsp;&nbsp; We are currently running Windows Small Business
> Server 2003 for SBS and<BR>&gt;&nbsp;&nbsp; are using ISA Server 2004 and
> Exchange Server 2003. This server also<BR>&gt;&nbsp;&nbsp; stands as the DNS
> server. We also have another server that is running<BR>&gt;&nbsp;&nbsp;
> Windows Server 2003 Standard and is acting as a web server. We will
> be<BR>&gt;&nbsp;&nbsp; changing internet service providers in the near future,
> which means we<BR>&gt;&nbsp;&nbsp; will have a new static ip address. Once we
> make the transition, what<BR>&gt;&nbsp;&nbsp; changes will need to be made to
> the servers to ensure that everything<BR>&gt;&nbsp;&nbsp; is still working
> properly? <BR>&gt;&nbsp;&nbsp; Thank you,<BR>&gt;&nbsp;&nbsp;
> Aaron<BR></BLOCKQUOTE></BODY></HTML>
>
> ------=_NextPart_000_0082_01C6C918.BDF7F5A0--

In news:2B849F6D-1F33-40D3-B9BD-(E-Mail Removed),
Cris Hanna [SBS-MVP] <(E-Mail Removed) t>
typed:
> Also cross posting is not recommend

Pshaw, Cris. *multiposting* sucks. Crossposting to a handful of relevant
groups is fine.


>
> Since you're website is being hosted off that public IP...your www
> record needs changing as well as reverse DNS, Any A records....in
> essence any public DNS record that points to your current IP...needs
> changing

Pshaw??? Madam, I'm aghast!


--
Cris Hanna [SBS-MVP]
-----------------------------
Please do not contact me directly, only reply within the Newsgroup
Thanks
--------------------------------
Using Windows Mail on Vista Ultimate
"Lanwench [MVP - Exchange]" <(E-Mail Removed) ahoo.com> wrote in message news:(E-Mail Removed)...
In news:2B849F6D-1F33-40D3-B9BD-(E-Mail Removed),
Cris Hanna [SBS-MVP] <(E-Mail Removed) t>
typed:
> Also cross posting is not recommend

Pshaw, Cris. *multiposting* sucks. Crossposting to a handful of relevant
groups is fine.


>
> Since you're website is being hosted off that public IP...your www
> record needs changing as well as reverse DNS, Any A records....in
> essence any public DNS record that points to your current IP...needs
> changing

In news:84FFC591-AFBA-4BBC-AB15-(E-Mail Removed),
Cris Hanna [SBS-MVP] <(E-Mail Removed) t>
typed:
> Pshaw??? Madam, I'm aghast!

Fiddlesticks? Stuff and nonsense? Balderdash?