Cannot connect IIS server to Internet

Question

I am reconstructing (with a different machine) a network situation with a Windows Server 2008 R2 machine with IIS. For some years, I have run this using a Comcast Business connection. The previous server failed, and I'm replacing it. The router firmware (the way Comcast handles the connection to the Internet) seems to be correct (I specify the IP address of the server in the place for Port Forwarding--TCP, port 80).

But attempting to access the site via my publicly available site name (or its IP) yields "cannot display page." From within my home network, entering http://[that server's IP] gives the desired IIS result.

Can anyone suggest what might be going wrong here?

Answer 1

Usually, "home-style routers" have 2 places where you should do the change. Firewall & Port Forwarding. You might want to check if there's something similar on your router.

Answer 2

Fundamentally:

• Internet DNS should point the site name at the external, public IP address of the NAT/router/firewall/thing. I assume you have only one public IP address.

• Internal DNS or HOSTS files for internal network clients should point the site name at the internal, private IP address (192.168.0.x, I'd guess)

• Your router/firewall must forward all TCP port 80 traffic from the public network to that IP address on the private network.

  • You can't do this for multiple computers, so if there's a rule for the old server that does this port forwarding, or HTTP Server forwarding, or DMZ creation, that will have to be removed before any of this will work externally.
  • alternatively, you could use the same IP address the old machine used; it's unclear why you didn't do that.

Answer 3

I would suggest first narrowing down your problem set. Accessing a server via its direct ip or localhost is not always the same as acessing it via a hostname. Things to try:

1) Nslookup your external hostname. Is it pointing at the right IP?

2) Make a mapping in your hosts file that maps the intended hostname to the local server IP. Does the site work now? This is best attempted from another machine on the same network.

This will give you an idea of where your problem might lie instead of just assuming its a router issue.

if trial 1 is incorrect then you need to check with your dns provider and confirm all the settings are correct.

If trial 2 doesn't work then you have something wrong with the configuration of your binding or firewall setting on the server.

If if trial 1 and 2 both work its most likely some forwarding issue with the router. You can start checking if any traffic is forwarding through the router.

Answer 4

The situation has clarified a bit, so I'm entering this "new" section. The world sees my site(s) as it should be. I cannot see what machines outside my home network see. I presume that this is because I have not yet run the ROUTE command. [However, entering the local IP shows what the public sees via the public IP] I see two interfaces, corresponding to the two NICs on my system. Both are on the same subnet: 10.1.10.n Should I continue to use two NICs (I do so to provide separate paths for WAN and LAN)? I know how to direct all LAN traffic through one NIC, but with both of them on the same subnet, can this work? My public IP is almost certainly handled completely by my Comcast arrangement. In other words, I never actually see that address, right? It seems to me that if my public IP were 2.2.2.2, then all traffic to that address would end up at my router but that the address would then have no meaning to my home network (which knows only the 10.1.10.n stuff). Is this correct?

Last update, 11 August 2011 Although there are still many questions concerning this event, the bottom line is that Comcast replaced the router (that provides their Internet signal to me) and all works as it did before. Here is how easy it should be: 1. Comcast supplies the router/modem from which I take my signal. 2. I configure that router to pass all Port 80 traffic to my web server. Additionally, I must tell "the world" (Network Solutions, in my case) what my IP is. That is provided to me by Comcast.

The situation I started with was much more complex (involving virtual servers, etc), but I had to get it down to the basics in order to get the problem solved.

Thanks for the many suggestions and insights into networking.