We're running SBS 2003 R1. We're getting ready to upgrade hardware and
software to SBS 2008. Since ISA is supposed to be on the SBS 2008 box, we've
been looking at putting an Untangle firewall box between the Internet and
SBS. We tried setting this up and it almost worked, blocking and filtering
incoming as it should. Unfortunately it also blocked outgoing Exchange email
and we have not been able to figure out why. We've since removed the
Untangle box from the network and (we think) put the SBS back to its
firewall configuration.

The problem is that ever since we tried Untangle, DNS has been very, very
slow both on the server and on the clients. Clients connoting to the
Internet using either IE or Firefox take 10-30 seconds to connect to Google
or any other page, assuming that it doesn't time out. It times out over half
the time.

Any suggestions what we missed when we took the Untangle box offline?

Brian Bygland
Kent United Methodist Church

I have several clients using Untangle with SBS 2003. Did you setup UT in
bridge mode or did you install the router module? None of my installs block
outgoing Exchange port 25 traffic. None of them have experienced DNS
slowness. What DNS forwarders are you using?

"BrianB" <brian.notthis.bygland> wrote in message
news:5496
[..]

We set it up in Router mode and we are using the Untangle Box as the first
forwarder and the Qwest DNS as the second and third forwarder.

Also, I got it backwards, it was not blocking the outgoing Exchange traffic
that was working just fine it was blocking all incoming Exchange traffic but
I think that was because I did not get the SBS box to listen for 25 traffic
on the internal IP.

Brian

"SteveB" <newsgroup> wrote in message
news:3460
[..]

IMO ignore Quests DNS completely

Configure your SBS Box to use OpenDNS DNS servers
208.67.222.222
208.67.220.220
Assuming you have the SBS Box as the DHCP Server
Things should be a lot better
Russ

Thanks, Russ. We'll give that a try.

"Russ - www.SBITS.Biz" <support> wrote in
message news:3404
[..]

ISP's seem to think DNS servers are not worth investing any effort money
into.
(For some reason they forget you are only as fast as your weakest link.)

Russ

OK are you now saying you think the UT is configured correctly to allow mail
in and out?

"BrianB" <brian.notthis.bygland> wrote in message
news:3476
[..]