You receive a "403 Forbidden" message when you try to connect to a Web site that is on Small Business Server 2003 (842612)


The information in this article applies to:

  • Microsoft Windows Small Business Server 2003, Premium Edition

SYMPTOMS

After you configure the Internet connection on your Microsoft Small Business Server (SBS) 2003 computer, you experience both of the following symptoms:
  • If a user tries to connect to a Web site on the Small Business Server 2003 computer from the Internet, that user receives the following error messsage:
    The page cannot be displayed

    403 Forbidden - The server denies the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)
    Internet Security and Acceleration Server
  • If a user tries to connect to that same Web site from the internal network, that user can access the Web site successfully.
Note You only experience this issue when your Small Business Server computer has more than one network adapter installed and when it is running Microsoft Internet Security and Acceleration (ISA) Server 2000.

CAUSE

This issue occurs if a user types a URL in the Web browser program that does not match any one of the ISA Server 2000 destination sets. By default, when the URL does not match any part of the ISA Server destination sets, only the "Default rule" ISA Server Web publishing rule is applied to the incoming Web request. The default rule is configured to deny any request.

Note This issue may affect all the Web sites that you configure in Small Business Server 2003. For a user to connect to a Web site that is published by using ISA Server, a Web publishing rule must apply to the user's Web site request. Additionally, this Web publishing rule must permit the connection. Because the Web publishing rules that you create by using the Configure E-mail and Internet Connection Wizard apply to specific destination sets, requests that do not match any part of these destination sets are unsuccessful.

RESOLUTION

To resolve this issue, run the Configure E-mail and Internet Connection Wizard to configure the firewall, the Web services, and the Web server certificate. To do this, follow these steps:

Note These steps assume that you have previously run the Configure E-mail and Internet Connection Wizard in Small Business Server 2003. If you have not already run the Configure E-mail and Internet Connection Wizard, we recommend that you do so before you follow these steps. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

825763 How to configure Internet access in Windows Small Business Server 2003

  1. On the Small Business Server 2003 computer, click Start, and then click Server Management.
  2. Expand Standard Management, and then click To Do List.
  3. In the right pane, click Connect to the Internet, and then click Next.
  4. On the Connection Type page, click Do not change connection type, and then click Next.
  5. On the Firewall page, click Enable firewall, and then click Next.

    Important Do not click the Do not change firewall configuration option.
  6. When you receive the following message, click OK:To ensure the proper configuraton of ISA Server, existing custom packet filters will be disabled. For information on how to re-enable existing packet filters, see Small Business Server Help.
  7. On the Services Configuration page, click to select the check boxes of the additional services that you want to make available from the Internet, and then click Next.
  8. On the Web Services Configuration page, click Allow access to only the following Web site services from the Internet, click to select the check boxes of the services and of the Web sites that you want to make accessible from the Internet, and then click Next.
  9. On the Web Server Certificate page, click Create a new Web server certificate, type the Small Business Server computer's fully qualified domain name in the Web server name box, and then click Next.

    Important The fully qualified domain name that you type in the Web server name box must be the same name that you use to connect to the Web site from the Internet. For example, if the URL that you use to connect to a Microsoft Outlook Web Access Web site is https://mail.contoso.com/exchange, type mail.contoso.com in the Web server name box.
  10. On the Internet E-mail page, click Do not change Internet e-mail configuration, and then click Next.
  11. On the Completing the Configure E-mail and Internet Connection Wizard page, view the configuration information to make sure that it is correct, and then click Finish.

MORE INFORMATION

For additional support information, downloads, and product documentation for Windows Small Business Server 2003, visit the following Microsoft Web site:

http://www.microsoft.com/windowsserver2003/sbs/default.mspx

For additional information about the Configure E-mail and Internet Connection Wizard, see the "Understanding the Configure E-mail and Internet Connection Wizard" topic in Small Business Server Help and Support Center.
Modification Type:MajorLast Reviewed:6/28/2004
Keywords:kbFirewall kbenv kbprb KB842612 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.