Slow file transfers

[Sid]

1st let me explain how the system is networked. I have one server that is a 2k3 standard edition that is for better words a "bastion host", it sits out in the open and has 2 nics. The external of course host the internet and has a static IP and the internal is configured in RRAS as a NAT, it has no gateway and use an internal address 192.168.2.1. Behind that NAT nic is a netgear NAT router with the wan address of 192.168.2.75 and is set to factory defaults with all ports and forwarding shut down. Connected to the router are a SBS2K3 premium server(PDC AD) and a XP workstation, there address are 192.168.0.3(server) and 192.168.0.10(XP).

Now here where it slows down. If I set the XP box to "joined to a domain" and I try to transfer files from the bastion host the transfers slow to a crawl, but if I have the XP box set as just a workgroup member the transfers are at normal speeds. Anybody have any thoughts on this?

[YeOldeStonecat]

1st hunch is are you going through ISA when running through domain?

DNS settings the same for the XP rig, wether you join domain, or log in locally?

What's the server outside do? Odd to have software NAT, then hardware NAT. The SBS servers I do, broadband modem to router. Router LAN Port to external NIC of SBS server (static IP). Then SBS Server inside NIC to switch to rest of network.

[Sid]

are you going through ISA when running through domain?

Not sure, if it was installed by default then yes if not then no. I'll take a look when I get home.

DNS settings the same for the XP rig, wether you join domain, or log in locally?

Yes

What's the server outside do?

Public NS and webserver. Normally I would stick the box behind the router but the DNS server needs so many open ports that this router will not do what I need to in filtering. I suppose that I could just use the switch part of the router.

[YeOldeStonecat]

Originally posted by Sid

Public NS and webserver. Normally I would stick the box behind the router but the DNS server needs so many open ports that this router will not do what I need to in filtering. I suppose that I could just use the switch part of the router.

Ohh...and ya don't wanna run those on SBS?

[Sid]

I have plans for future migration to SBS2k3 seeing how MS just sent me another copy of premium:D. I have an issue with AD and ftp user isolation that MS has yet to document correctly. When I was at the technet seminar a few weeks back I asked the presenter how to set it up. He told me he has not tried it and didn't know how. He also told me he would find out and let me know but I have yet to hear from him.

[Sid]

Hot damn! FTP user isolation works great in sbs! Wonder why it doesn't work in 2k3 standard server

[Sid]

are you going through ISA when running through domain?

Nope, its not installed.

[Sid]

I thought you said IAS, now that I have reread it I notice that you said ISA. Nope no ISA server.