Sybase NNTP forums - End Of Life (EOL)

The NNTP forums from Sybase - forums.sybase.com - are now closed.

All new questions should be directed to the appropriate forum at the SAP Community Network (SCN).

Individual products have links to the respective forums on SCN, or you can go to SCN and search for your product in the search box (upper right corner) to find your specific developer center.

IIOP and Jaguar throgh a firewall

4 posts in General Discussion (old) Last posting was on 2000-04-03 23:43:25.0Z
Rune Okstad Posted on 2000-03-31 09:43:34.0Z
Newsgroups: sybase.public.easerver
From: "Rune Okstad" <roks@online.no>
Subject: IIOP and Jaguar throgh a firewall
Date: Fri, 31 Mar 2000 11:43:34 +0200
Lines: 287
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
NNTP-Posting-Host: ti29a62-0044.dialup.online.no 130.67.134.44
Message-ID: <347_PfGfmYvm$GA.290@forums.sybase.com>
Path: forums-1-dub!forums-1-dub!forums-master.sybase.com!forums.sybase.com
Xref: forums-1-dub sybase.public.easerver:25135
Article PK: 154234

I try to forward this problem to the newsgroup again, hoping for some more
answers.

The problem is that I cannot instanciate a Jaguar component from an applet
run in MS Internet Explorer 5.0 when trying to connect throug a client side
firewall/router that performs IP aliasing.
I can however run the applet in the AppletViewer and make it work perfectly
through the firewall.
I can use the Jaguar manager to connect to the same port (9000) on the
Jaguar through the firewall.
I can run the applet in Internet Explorer and make it work when not
connecting through the firewall.

What can be the reason for these problems?
Are there any way to solve them?

I'm running Jaguar CTS 3.5 and WinNT 4.0.

Best Regards

Rune Okstad


----- Original Message -----
From: Rune Okstad <roks@online.no>
Newsgroups: powersoft.public.easerver
Sent: Wednesday, March 29, 2000 9:22 AM
Subject: SV: SV: SV: Question About IIOP and Jaguar

> The firewall/router translates a public IP address to the local address of
> my computer (running the applet).
> (But still it works using AppletViewer/Jaguar Manager towards the same
> port).
>
> Best Regards
>
> Rune Okstad
>
>
> Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> meldingsnyheter:38e1bc39.469304@forums.sybase.com...
> > Not a problem. Is this just a firewall or does it perform any ip
> > redirection/aliasing as well?
> >
> >
> > Carson
> >
> > ___________________________________________________________
> >
> > Carson Hager
> > Team Sybase
> > Dynamic Data Solutions, Inc.
> > Enterprise Application Studio 3.0 Consulting and Training
> > http://www.dyn-data.com
> >
> > DDS is now hiring EAServer consultants
> > to support its exploding EAServer business!
> > Please submit your resume to
> > hr@dyn-data.com!
> >
> >
> > On Wed, 29 Mar 2000 08:01:41 +0200, "Rune Okstad" <roks@online.no>
> > wrote:
> >
> > >I'm creating the connection in the start() method of the applet. Is
this
> a
> > >problem?
> > >
> > >The connection works 100% when the applet is not communicating with the
> > >Jaguar server component through the firewall.
> > >
> > >Best Regards
> > >
> > >Rune Okstad
> > >
> > >
> > >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > >meldingsnyheter:38e13fdb.26092929@forums.sybase.com...
> > >> Are you possibly performing the connect in the init() method of the
> > >> applet? The MS VM has a bug prohibiting the opening of a socket in
> > >> that method. I would turn on the Java Console in IE for more info.
> > >>
> > >>
> > >> Carson
> > >>
> > >> ___________________________________________________________
> > >>
> > >> Carson Hager
> > >> Team Sybase
> > >> Dynamic Data Solutions, Inc.
> > >> Enterprise Application Studio 3.0 Consulting and Training
> > >> http://www.dyn-data.com
> > >>
> > >> DDS is now hiring EAServer consultants
> > >> to support its exploding EAServer business!
> > >> Please submit your resume to
> > >> hr@dyn-data.com!
> > >>
> > >>
> > >> On Tue, 28 Mar 2000 09:55:40 +0200, "Rune Okstad" <roks@online.no>
> > >> wrote:
> > >>
> > >> >Hello!
> > >> >
> > >> >I'm experiencing a similar thing with our Jaguar installation.
> > >> >We have an applet instintiating and communicating with a stateless
> Jaguar
> > >> >server component (EJB) via IIOP/CORBA (port 9000).
> > >> >When running the applet in Microsoft Internet Explorer through our
> > >firewall,
> > >> >the instantiation of the component fails when trying to establish
the
> > >> >session with the call
> > >> > "session = manager.createSession(user, password);". There is no
trace
> of
> > >> >the request in the Jaguar srvlog.
> > >> >When running the same applet, not through the firewall, it works
> > >perfectly.
> > >> >
> > >> >The strange thing is that we have no problem running Jaguar Manager
> > >through
> > >> >the firewall to the same port.
> > >> >We can also run the applet in the appletviewer and maket work
> perfectly,
> > >> >also through the firewall.
> > >> >
> > >> >
> > >> >Do you have any explanation on this behaviour?
> > >> >Could there be any security aspects of Microsoft Internet Explorer
> > >combined
> > >> >with IP address conversion?
> > >> >
> > >> >
> > >> >Best Regards
> > >> >
> > >> >Rune Okstad
> > >> >
> > >> >
> > >> >
> > >> >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > >> >meldingsnyheter:38deb6d5.4660130@forums.sybase.com...
> > >> >> >1) Do I only need to be concerned with Port 9000 or are there
more
> > >ports
> > >> >> >involved that must be forwarded through the firewall?
> > >> >>
> > >> >> That's the only one to be concerned with.
> > >> >>
> > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are they
> special
> > >> >> >packets designed for IIOP (for example Microsoft created it's own
> > >packet
> > >> >GRE
> > >> >> >for doing VPN connections).
> > >> >>
> > >> >> They are standard tcp/ip packets.
> > >> >>
> > >> >> >3) Will this work using HTTP if IIOP fails to make it through the
> > >> >firewall.
> > >> >>
> > >> >> Yes.
> > >> >>
> > >> >> What error are you getting when you try to create the instance?
> > >> >>
> > >> >>
> > >> >> Carson
> > >> >>
> > >> >> ___________________________________________________________
> > >> >>
> > >> >> Carson Hager
> > >> >> Team Sybase
> > >> >> Dynamic Data Solutions, Inc.
> > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > >> >> http://www.dyn-data.com
> > >> >>
> > >> >> DDS is now hiring EAServer consultants
> > >> >> to support its exploding EAServer business!
> > >> >> Please submit your resume to
> > >> >> hr@dyn-data.com!
> > >> >>
> > >> >>
> > >> >> On Sun, 26 Mar 2000 14:28:57 -0500, "Brad Gawne"
> <bgawne@bralar.on.ca>
> > >> >> wrote:
> > >> >>
> > >> >> >Hi,
> > >> >> >
> > >> >> >Does anybody know if the IIOP protocol travels inside standard
TCP
> or
> > >UDP
> > >> >> >packets or whether it has it's own packet type?
> > >> >> >
> > >> >> >I am trying to get an IIOP program (actually a PB program using
an
> > >IIOP
> > >> >> >connection) to reach through a firewall by forwarding Port 9000
> > >requests
> > >> >to
> > >> >> >my Jag server. However my program seems unable to create
instances
> of
> > >> >> >objects on the Jag Server.
> > >> >> >
> > >> >> >In summary my questions are:
> > >> >> >
> > >> >> >1) Do I only need to be concerned with Port 9000 or are there
more
> > >ports
> > >> >> >involved that must be forwarded through the firewall?
> > >> >> >
> > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are they
> special
> > >> >> >packets designed for IIOP (for example Microsoft created it's own
> > >packet
> > >> >GRE
> > >> >> >for doing VPN connections).
> > >> >> >
> > >> >> >3) Will this work using HTTP if IIOP fails to make it through the
> > >> >firewall.
> > >> >> >
> > >> >> >Things to note:
> > >> >> >
> > >> >> >I have total control over the firewall and am currently
forwarding
> all
> > >> >port
> > >> >> >9000 UDP/TCP traffic to my Jag server for inbound connections.
> > >> >> >
> > >> >> >Thanks for any help.
> > >> >> >
> > >> >> >
> > >> >> >Regards,
> > >> >> >Brad Gawne
> > >> >> >
> > >> >> >
> > >> >> >
> > >> >>
> > >> >>
> > >> >> ___________________________________________________________
> > >> >>
> > >> >> Carson Hager
> > >> >> Team Sybase
> > >> >> Dynamic Data Solutions, Inc.
> > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > >> >>
> > >> >> DDS Enterprise Application Framework
> > >> >> Available Now as Open Source!
> > >> >> http://www.dyn-data.com
> > >> >>
> > >> >
> > >> >
> > >>
> > >>
> > >> ___________________________________________________________
> > >>
> > >> Carson Hager
> > >> Team Sybase
> > >> Dynamic Data Solutions, Inc.
> > >> Enterprise Application Studio 3.0 Consulting and Training
> > >>
> > >> DDS Enterprise Application Framework
> > >> Available Now as Open Source!
> > >> http://www.dyn-data.com
> > >>
> > >
> > >
> >
> >
> > ___________________________________________________________
> >
> > Carson Hager
> > Team Sybase
> > Dynamic Data Solutions, Inc.
> > Enterprise Application Studio 3.0 Consulting and Training
> >
> > DDS Enterprise Application Framework
> > Available Now as Open Source!
> > http://www.dyn-data.com
> >
>
>


Øystein Bøhler Johnsen Posted on 2000-04-03 07:42:26.0Z
Newsgroups: sybase.public.easerver
From: "Øystein Bøhler Johnsen" <oystein.johnsen@nordlandsdata.no>
Subject: Re: IIOP and Jaguar throgh a firewall
Date: Mon, 3 Apr 2000 09:42:26 +0200
Lines: 322
Organization: NordlandsData A/S
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
NNTP-Posting-Host: mail.nordlandsdata.no 193.215.147.2
Message-ID: <347_5iZSXHUn$GA.52@forums.sybase.com>
References: <347_PfGfmYvm$GA.290@forums.sybase.com>
Path: forums-1-dub!forums-1-dub!forums-master.sybase.com!forums.sybase.com
Xref: forums-1-dub sybase.public.easerver:24966
Article PK: 154124

Hallo!
When there is IP aliasing in the firewall, you have to set the properties
for proxyhost and proxyport when connecting from the client.

props = new java.util.Properties();
props.put("com.sybase.CORBA.ProxyHost","111.111.111.111");
props.put("com.sybase.CORBA.ProxyPort","9000");

orb = ORB.init((java.lang.String[])null, props);

manager =
ManagerHelper.narrow(orb.string_to_object("iiop://111.111.111.111:9000"));

This is because the client will set the proxyhost with the IP from the
jaguar server and not the aliasing IP-adress at first connect.
Then when the client try to narrow your component, the proxyhost IP will be
the wrong IP, and your client cant find the jaguar-server.

Oystein B. Johnsen
NordlandsData

Rune Okstad <roks@online.no> wrote in message
news:PfGfmYvm$GA.290@forums.sybase.com...
> I try to forward this problem to the newsgroup again, hoping for some more
> answers.
>
> The problem is that I cannot instanciate a Jaguar component from an applet
> run in MS Internet Explorer 5.0 when trying to connect throug a client
side
> firewall/router that performs IP aliasing.
> I can however run the applet in the AppletViewer and make it work
perfectly
> through the firewall.
> I can use the Jaguar manager to connect to the same port (9000) on the
> Jaguar through the firewall.
> I can run the applet in Internet Explorer and make it work when not
> connecting through the firewall.
>
> What can be the reason for these problems?
> Are there any way to solve them?
>
> I'm running Jaguar CTS 3.5 and WinNT 4.0.
>
> Best Regards
>
> Rune Okstad
>
>
> ----- Original Message -----
> From: Rune Okstad <roks@online.no>
> Newsgroups: powersoft.public.easerver
> Sent: Wednesday, March 29, 2000 9:22 AM
> Subject: SV: SV: SV: Question About IIOP and Jaguar
>
>
> > The firewall/router translates a public IP address to the local address
of
> > my computer (running the applet).
> > (But still it works using AppletViewer/Jaguar Manager towards the same
> > port).
> >
> > Best Regards
> >
> > Rune Okstad
> >
> >
> > Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > meldingsnyheter:38e1bc39.469304@forums.sybase.com...
> > > Not a problem. Is this just a firewall or does it perform any ip
> > > redirection/aliasing as well?
> > >
> > >
> > > Carson
> > >
> > > ___________________________________________________________
> > >
> > > Carson Hager
> > > Team Sybase
> > > Dynamic Data Solutions, Inc.
> > > Enterprise Application Studio 3.0 Consulting and Training
> > > http://www.dyn-data.com
> > >
> > > DDS is now hiring EAServer consultants
> > > to support its exploding EAServer business!
> > > Please submit your resume to
> > > hr@dyn-data.com!
> > >
> > >
> > > On Wed, 29 Mar 2000 08:01:41 +0200, "Rune Okstad" <roks@online.no>
> > > wrote:
> > >
> > > >I'm creating the connection in the start() method of the applet. Is
> this
> > a
> > > >problem?
> > > >
> > > >The connection works 100% when the applet is not communicating with
the
> > > >Jaguar server component through the firewall.
> > > >
> > > >Best Regards
> > > >
> > > >Rune Okstad
> > > >
> > > >
> > > >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > >meldingsnyheter:38e13fdb.26092929@forums.sybase.com...
> > > >> Are you possibly performing the connect in the init() method of the
> > > >> applet? The MS VM has a bug prohibiting the opening of a socket in
> > > >> that method. I would turn on the Java Console in IE for more info.
> > > >>
> > > >>
> > > >> Carson
> > > >>
> > > >> ___________________________________________________________
> > > >>
> > > >> Carson Hager
> > > >> Team Sybase
> > > >> Dynamic Data Solutions, Inc.
> > > >> Enterprise Application Studio 3.0 Consulting and Training
> > > >> http://www.dyn-data.com
> > > >>
> > > >> DDS is now hiring EAServer consultants
> > > >> to support its exploding EAServer business!
> > > >> Please submit your resume to
> > > >> hr@dyn-data.com!
> > > >>
> > > >>
> > > >> On Tue, 28 Mar 2000 09:55:40 +0200, "Rune Okstad" <roks@online.no>
> > > >> wrote:
> > > >>
> > > >> >Hello!
> > > >> >
> > > >> >I'm experiencing a similar thing with our Jaguar installation.
> > > >> >We have an applet instintiating and communicating with a stateless
> > Jaguar
> > > >> >server component (EJB) via IIOP/CORBA (port 9000).
> > > >> >When running the applet in Microsoft Internet Explorer through our
> > > >firewall,
> > > >> >the instantiation of the component fails when trying to establish
> the
> > > >> >session with the call
> > > >> > "session = manager.createSession(user, password);". There is no
> trace
> > of
> > > >> >the request in the Jaguar srvlog.
> > > >> >When running the same applet, not through the firewall, it works
> > > >perfectly.
> > > >> >
> > > >> >The strange thing is that we have no problem running Jaguar
Manager
> > > >through
> > > >> >the firewall to the same port.
> > > >> >We can also run the applet in the appletviewer and maket work
> > perfectly,
> > > >> >also through the firewall.
> > > >> >
> > > >> >
> > > >> >Do you have any explanation on this behaviour?
> > > >> >Could there be any security aspects of Microsoft Internet Explorer
> > > >combined
> > > >> >with IP address conversion?
> > > >> >
> > > >> >
> > > >> >Best Regards
> > > >> >
> > > >> >Rune Okstad
> > > >> >
> > > >> >
> > > >> >
> > > >> >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > >> >meldingsnyheter:38deb6d5.4660130@forums.sybase.com...
> > > >> >> >1) Do I only need to be concerned with Port 9000 or are there
> more
> > > >ports
> > > >> >> >involved that must be forwarded through the firewall?
> > > >> >>
> > > >> >> That's the only one to be concerned with.
> > > >> >>
> > > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are they
> > special
> > > >> >> >packets designed for IIOP (for example Microsoft created it's
own
> > > >packet
> > > >> >GRE
> > > >> >> >for doing VPN connections).
> > > >> >>
> > > >> >> They are standard tcp/ip packets.
> > > >> >>
> > > >> >> >3) Will this work using HTTP if IIOP fails to make it through
the
> > > >> >firewall.
> > > >> >>
> > > >> >> Yes.
> > > >> >>
> > > >> >> What error are you getting when you try to create the instance?
> > > >> >>
> > > >> >>
> > > >> >> Carson
> > > >> >>
> > > >> >> ___________________________________________________________
> > > >> >>
> > > >> >> Carson Hager
> > > >> >> Team Sybase
> > > >> >> Dynamic Data Solutions, Inc.
> > > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > > >> >> http://www.dyn-data.com
> > > >> >>
> > > >> >> DDS is now hiring EAServer consultants
> > > >> >> to support its exploding EAServer business!
> > > >> >> Please submit your resume to
> > > >> >> hr@dyn-data.com!
> > > >> >>
> > > >> >>
> > > >> >> On Sun, 26 Mar 2000 14:28:57 -0500, "Brad Gawne"
> > <bgawne@bralar.on.ca>
> > > >> >> wrote:
> > > >> >>
> > > >> >> >Hi,
> > > >> >> >
> > > >> >> >Does anybody know if the IIOP protocol travels inside standard
> TCP
> > or
> > > >UDP
> > > >> >> >packets or whether it has it's own packet type?
> > > >> >> >
> > > >> >> >I am trying to get an IIOP program (actually a PB program using
> an
> > > >IIOP
> > > >> >> >connection) to reach through a firewall by forwarding Port
9000
> > > >requests
> > > >> >to
> > > >> >> >my Jag server. However my program seems unable to create
> instances
> > of
> > > >> >> >objects on the Jag Server.
> > > >> >> >
> > > >> >> >In summary my questions are:
> > > >> >> >
> > > >> >> >1) Do I only need to be concerned with Port 9000 or are there
> more
> > > >ports
> > > >> >> >involved that must be forwarded through the firewall?
> > > >> >> >
> > > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are they
> > special
> > > >> >> >packets designed for IIOP (for example Microsoft created it's
own
> > > >packet
> > > >> >GRE
> > > >> >> >for doing VPN connections).
> > > >> >> >
> > > >> >> >3) Will this work using HTTP if IIOP fails to make it through
the
> > > >> >firewall.
> > > >> >> >
> > > >> >> >Things to note:
> > > >> >> >
> > > >> >> >I have total control over the firewall and am currently
> forwarding
> > all
> > > >> >port
> > > >> >> >9000 UDP/TCP traffic to my Jag server for inbound connections.
> > > >> >> >
> > > >> >> >Thanks for any help.
> > > >> >> >
> > > >> >> >
> > > >> >> >Regards,
> > > >> >> >Brad Gawne
> > > >> >> >
> > > >> >> >
> > > >> >> >
> > > >> >>
> > > >> >>
> > > >> >> ___________________________________________________________
> > > >> >>
> > > >> >> Carson Hager
> > > >> >> Team Sybase
> > > >> >> Dynamic Data Solutions, Inc.
> > > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > > >> >>
> > > >> >> DDS Enterprise Application Framework
> > > >> >> Available Now as Open Source!
> > > >> >> http://www.dyn-data.com
> > > >> >>
> > > >> >
> > > >> >
> > > >>
> > > >>
> > > >> ___________________________________________________________
> > > >>
> > > >> Carson Hager
> > > >> Team Sybase
> > > >> Dynamic Data Solutions, Inc.
> > > >> Enterprise Application Studio 3.0 Consulting and Training
> > > >>
> > > >> DDS Enterprise Application Framework
> > > >> Available Now as Open Source!
> > > >> http://www.dyn-data.com
> > > >>
> > > >
> > > >
> > >
> > >
> > > ___________________________________________________________
> > >
> > > Carson Hager
> > > Team Sybase
> > > Dynamic Data Solutions, Inc.
> > > Enterprise Application Studio 3.0 Consulting and Training
> > >
> > > DDS Enterprise Application Framework
> > > Available Now as Open Source!
> > > http://www.dyn-data.com
> > >
> >
> >
>
>


Evan Ireland Posted on 2000-04-03 23:43:25.0Z
Newsgroups: sybase.public.easerver
Date: Tue, 04 Apr 2000 11:43:25 +1200
From: Evan Ireland <eireland@sybase.com>
Organization: Sybase, Inc.
X-Mailer: Mozilla 4.7 [en] (WinNT; U)
X-Accept-Language: en
MIME-Version: 1.0
To: =?iso-8859-1?Q?=D8ystein=20B=F8hler?= Johnsen <oystein.johnsen@nordlandsdata.no>,dwolf@sybase.com, sandvik@sybase.com
Subject: Re: IIOP and Jaguar throgh a firewall
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Lines: 294
NNTP-Posting-Host: vpn-eme-069.sybase.com 130.214.8.69
Message-ID: <347_38E92C9D.74787D1D@sybase.com>
References: <347_PfGfmYvm$GA.290@forums.sybase.com> <347_5iZSXHUn$GA.52@forums.sybase.com>
Path: forums-1-dub!forums-1-dub!forums-master.sybase.com!forums.sybase.com
Xref: forums-1-dub sybase.public.easerver:24862
Article PK: 154056

Somebody else a while ago suggested another trick that is helpful.

Configure the Jaguar server to listen on the host name xx.yy.zz.
Use the local hosts file on the Jaguar server host to map xx.yy.zz
to the IP address of the Jaguar server host.

Arrange for the DNS for xx.yy.zz (outside the Jaguar server host)
to resolve to the address of the firewall.

We should probably document both of these approaches in our
security docs.

"Øystein Bøhler Johnsen" wrote:
>
> Hallo!
> When there is IP aliasing in the firewall, you have to set the properties
> for proxyhost and proxyport when connecting from the client.
>
> props = new java.util.Properties();
> props.put("com.sybase.CORBA.ProxyHost","111.111.111.111");
> props.put("com.sybase.CORBA.ProxyPort","9000");
>
> orb = ORB.init((java.lang.String[])null, props);
>
> manager =
> ManagerHelper.narrow(orb.string_to_object("iiop://111.111.111.111:9000"));
>
> This is because the client will set the proxyhost with the IP from the
> jaguar server and not the aliasing IP-adress at first connect.
> Then when the client try to narrow your component, the proxyhost IP will be
> the wrong IP, and your client cant find the jaguar-server.
>
> Oystein B. Johnsen
> NordlandsData
>
> Rune Okstad <roks@online.no> wrote in message
> news:PfGfmYvm$GA.290@forums.sybase.com...
> > I try to forward this problem to the newsgroup again, hoping for some more
> > answers.
> >
> > The problem is that I cannot instanciate a Jaguar component from an applet
> > run in MS Internet Explorer 5.0 when trying to connect throug a client
> side
> > firewall/router that performs IP aliasing.
> > I can however run the applet in the AppletViewer and make it work
> perfectly
> > through the firewall.
> > I can use the Jaguar manager to connect to the same port (9000) on the
> > Jaguar through the firewall.
> > I can run the applet in Internet Explorer and make it work when not
> > connecting through the firewall.
> >
> > What can be the reason for these problems?
> > Are there any way to solve them?
> >
> > I'm running Jaguar CTS 3.5 and WinNT 4.0.
> >
> > Best Regards
> >
> > Rune Okstad
> >
> >
> > ----- Original Message -----
> > From: Rune Okstad <roks@online.no>
> > Newsgroups: powersoft.public.easerver
> > Sent: Wednesday, March 29, 2000 9:22 AM
> > Subject: SV: SV: SV: Question About IIOP and Jaguar
> >
> >
> > > The firewall/router translates a public IP address to the local address
> of
> > > my computer (running the applet).
> > > (But still it works using AppletViewer/Jaguar Manager towards the same
> > > port).
> > >
> > > Best Regards
> > >
> > > Rune Okstad
> > >
> > >
> > > Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > meldingsnyheter:38e1bc39.469304@forums.sybase.com...
> > > > Not a problem. Is this just a firewall or does it perform any ip
> > > > redirection/aliasing as well?
> > > >
> > > >
> > > > Carson
> > > >
> > > > ___________________________________________________________
> > > >
> > > > Carson Hager
> > > > Team Sybase
> > > > Dynamic Data Solutions, Inc.
> > > > Enterprise Application Studio 3.0 Consulting and Training
> > > > http://www.dyn-data.com
> > > >
> > > > DDS is now hiring EAServer consultants
> > > > to support its exploding EAServer business!
> > > > Please submit your resume to
> > > > hr@dyn-data.com!
> > > >
> > > >
> > > > On Wed, 29 Mar 2000 08:01:41 +0200, "Rune Okstad" <roks@online.no>
> > > > wrote:
> > > >
> > > > >I'm creating the connection in the start() method of the applet. Is
> > this
> > > a
> > > > >problem?
> > > > >
> > > > >The connection works 100% when the applet is not communicating with
> the
> > > > >Jaguar server component through the firewall.
> > > > >
> > > > >Best Regards
> > > > >
> > > > >Rune Okstad
> > > > >
> > > > >
> > > > >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > > >meldingsnyheter:38e13fdb.26092929@forums.sybase.com...
> > > > >> Are you possibly performing the connect in the init() method of the
> > > > >> applet? The MS VM has a bug prohibiting the opening of a socket in
> > > > >> that method. I would turn on the Java Console in IE for more info.
> > > > >>
> > > > >>
> > > > >> Carson
> > > > >>
> > > > >> ___________________________________________________________
> > > > >>
> > > > >> Carson Hager
> > > > >> Team Sybase
> > > > >> Dynamic Data Solutions, Inc.
> > > > >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >> http://www.dyn-data.com
> > > > >>
> > > > >> DDS is now hiring EAServer consultants
> > > > >> to support its exploding EAServer business!
> > > > >> Please submit your resume to
> > > > >> hr@dyn-data.com!
> > > > >>
> > > > >>
> > > > >> On Tue, 28 Mar 2000 09:55:40 +0200, "Rune Okstad" <roks@online.no>
> > > > >> wrote:
> > > > >>
> > > > >> >Hello!
> > > > >> >
> > > > >> >I'm experiencing a similar thing with our Jaguar installation.
> > > > >> >We have an applet instintiating and communicating with a stateless
> > > Jaguar
> > > > >> >server component (EJB) via IIOP/CORBA (port 9000).
> > > > >> >When running the applet in Microsoft Internet Explorer through our
> > > > >firewall,
> > > > >> >the instantiation of the component fails when trying to establish
> > the
> > > > >> >session with the call
> > > > >> > "session = manager.createSession(user, password);". There is no
> > trace
> > > of
> > > > >> >the request in the Jaguar srvlog.
> > > > >> >When running the same applet, not through the firewall, it works
> > > > >perfectly.
> > > > >> >
> > > > >> >The strange thing is that we have no problem running Jaguar
> Manager
> > > > >through
> > > > >> >the firewall to the same port.
> > > > >> >We can also run the applet in the appletviewer and maket work
> > > perfectly,
> > > > >> >also through the firewall.
> > > > >> >
> > > > >> >
> > > > >> >Do you have any explanation on this behaviour?
> > > > >> >Could there be any security aspects of Microsoft Internet Explorer
> > > > >combined
> > > > >> >with IP address conversion?
> > > > >> >
> > > > >> >
> > > > >> >Best Regards
> > > > >> >
> > > > >> >Rune Okstad
> > > > >> >
> > > > >> >
> > > > >> >
> > > > >> >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > > >> >meldingsnyheter:38deb6d5.4660130@forums.sybase.com...
> > > > >> >> >1) Do I only need to be concerned with Port 9000 or are there
> > more
> > > > >ports
> > > > >> >> >involved that must be forwarded through the firewall?
> > > > >> >>
> > > > >> >> That's the only one to be concerned with.
> > > > >> >>
> > > > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are they
> > > special
> > > > >> >> >packets designed for IIOP (for example Microsoft created it's
> own
> > > > >packet
> > > > >> >GRE
> > > > >> >> >for doing VPN connections).
> > > > >> >>
> > > > >> >> They are standard tcp/ip packets.
> > > > >> >>
> > > > >> >> >3) Will this work using HTTP if IIOP fails to make it through
> the
> > > > >> >firewall.
> > > > >> >>
> > > > >> >> Yes.
> > > > >> >>
> > > > >> >> What error are you getting when you try to create the instance?
> > > > >> >>
> > > > >> >>
> > > > >> >> Carson
> > > > >> >>
> > > > >> >> ___________________________________________________________
> > > > >> >>
> > > > >> >> Carson Hager
> > > > >> >> Team Sybase
> > > > >> >> Dynamic Data Solutions, Inc.
> > > > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >> >> http://www.dyn-data.com
> > > > >> >>
> > > > >> >> DDS is now hiring EAServer consultants
> > > > >> >> to support its exploding EAServer business!
> > > > >> >> Please submit your resume to
> > > > >> >> hr@dyn-data.com!
> > > > >> >>
> > > > >> >>
> > > > >> >> On Sun, 26 Mar 2000 14:28:57 -0500, "Brad Gawne"
> > > <bgawne@bralar.on.ca>
> > > > >> >> wrote:
> > > > >> >>
> > > > >> >> >Hi,
> > > > >> >> >
> > > > >> >> >Does anybody know if the IIOP protocol travels inside standard
> > TCP
> > > or
> > > > >UDP
> > > > >> >> >packets or whether it has it's own packet type?
> > > > >> >> >
> > > > >> >> >I am trying to get an IIOP program (actually a PB program using
> > an
> > > > >IIOP
> > > > >> >> >connection) to reach through a firewall by forwarding Port
> 9000
> > > > >requests
> > > > >> >to
> > > > >> >> >my Jag server. However my program seems unable to create
> > instances
> > > of
> > > > >> >> >objects on the Jag Server.
> > > > >> >> >
> > > > >> >> >In summary my questions are:
> > > > >> >> >
> > > > >> >> >1) Do I only need to be concerned with Port 9000 or are there
> > more
> > > > >ports
> > > > >> >> >involved that must be forwarded through the firewall?
> > > > >> >> >
> > > > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are they
> > > special
> > > > >> >> >packets designed for IIOP (for example Microsoft created it's
> own
> > > > >packet
> > > > >> >GRE
> > > > >> >> >for doing VPN connections).
> > > > >> >> >
> > > > >> >> >3) Will this work using HTTP if IIOP fails to make it through
> the
> > > > >> >firewall.
> > > > >> >> >
> > > > >> >> >Things to note:
> > > > >> >> >
> > > > >> >> >I have total control over the firewall and am currently
> > forwarding
> > > all
> > > > >> >port
> > > > >> >> >9000 UDP/TCP traffic to my Jag server for inbound connections.
> > > > >> >> >
> > > > >> >> >Thanks for any help.
> > > > >> >> >
> > > > >> >> >
> > > > >> >> >Regards,
> > > > >> >> >Brad Gawne
> > > > >> >> >
> > > > >> >> >
> > > > >> >> >
> > > > >> >>
> > > > >> >>
> > > > >> >> ___________________________________________________________
> > > > >> >>
> > > > >> >> Carson Hager
> > > > >> >> Team Sybase
> > > > >> >> Dynamic Data Solutions, Inc.
> > > > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >> >>
> > > > >> >> DDS Enterprise Application Framework
> > > > >> >> Available Now as Open Source!
> > > > >> >> http://www.dyn-data.com
> > > > >> >>
> > > > >> >
> > > > >> >
> > > > >>
> > > > >>
> > > > >> ___________________________________________________________
> > > > >>
> > > > >> Carson Hager
> > > > >> Team Sybase
> > > > >> Dynamic Data Solutions, Inc.
> > > > >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >>
> > > > >> DDS Enterprise Application Framework
> > > > >> Available Now as Open Source!
> > > > >> http://www.dyn-data.com
> > > > >>
> > > > >
> > > > >
> > > >
> > > >
> > > > ___________________________________________________________
> > > >
> > > > Carson Hager
> > > > Team Sybase
> > > > Dynamic Data Solutions, Inc.
> > > > Enterprise Application Studio 3.0 Consulting and Training
> > > >
> > > > DDS Enterprise Application Framework
> > > > Available Now as Open Source!
> > > > http://www.dyn-data.com
> > > >
> > >
> > >
> >
> >

--
________________________________________________________________________________

Evan Ireland Sybase EAServer Engineering eireland@sybase.com
Wellington, New Zealand +64 4 934-5856


Dave Wolf [Sybase] Posted on 2000-04-03 12:58:39.0Z
Newsgroups: sybase.public.easerver
From: "Dave Wolf [Sybase]" <dwolf@sybase.com>
Subject: Re: IIOP and Jaguar throgh a firewall
Date: Mon, 3 Apr 2000 08:58:39 -0400
Lines: 349
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2919.6600
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
NNTP-Posting-Host: nomad6-18.sybase.com 157.133.176.18
Message-ID: <347_jrKOS0Wn$GA.316@forums.sybase.com>
References: <347_PfGfmYvm$GA.290@forums.sybase.com> <347_5iZSXHUn$GA.52@forums.sybase.com>
Path: forums-1-dub!forums-1-dub!forums-master.sybase.com!forums.sybase.com
Xref: forums-1-dub sybase.public.easerver:24956
Article PK: 154114

I couldnt have said it better myself ;)

Dave Wolf
Internet Applications Division

"Øystein Bøhler Johnsen" <oystein.johnsen@nordlandsdata.no> wrote in message
news:5iZSXHUn$GA.52@forums.sybase.com...
> Hallo!
> When there is IP aliasing in the firewall, you have to set the properties
> for proxyhost and proxyport when connecting from the client.
>
> props = new java.util.Properties();
> props.put("com.sybase.CORBA.ProxyHost","111.111.111.111");
> props.put("com.sybase.CORBA.ProxyPort","9000");
>
> orb = ORB.init((java.lang.String[])null, props);
>
> manager =
> ManagerHelper.narrow(orb.string_to_object("iiop://111.111.111.111:9000"));
>
> This is because the client will set the proxyhost with the IP from the
> jaguar server and not the aliasing IP-adress at first connect.
> Then when the client try to narrow your component, the proxyhost IP will
be
> the wrong IP, and your client cant find the jaguar-server.
>
> Oystein B. Johnsen
> NordlandsData
>
> Rune Okstad <roks@online.no> wrote in message
> news:PfGfmYvm$GA.290@forums.sybase.com...
> > I try to forward this problem to the newsgroup again, hoping for some
more
> > answers.
> >
> > The problem is that I cannot instanciate a Jaguar component from an
applet
> > run in MS Internet Explorer 5.0 when trying to connect throug a client
> side
> > firewall/router that performs IP aliasing.
> > I can however run the applet in the AppletViewer and make it work
> perfectly
> > through the firewall.
> > I can use the Jaguar manager to connect to the same port (9000) on the
> > Jaguar through the firewall.
> > I can run the applet in Internet Explorer and make it work when not
> > connecting through the firewall.
> >
> > What can be the reason for these problems?
> > Are there any way to solve them?
> >
> > I'm running Jaguar CTS 3.5 and WinNT 4.0.
> >
> > Best Regards
> >
> > Rune Okstad
> >
> >
> > ----- Original Message -----
> > From: Rune Okstad <roks@online.no>
> > Newsgroups: powersoft.public.easerver
> > Sent: Wednesday, March 29, 2000 9:22 AM
> > Subject: SV: SV: SV: Question About IIOP and Jaguar
> >
> >
> > > The firewall/router translates a public IP address to the local
address
> of
> > > my computer (running the applet).
> > > (But still it works using AppletViewer/Jaguar Manager towards the same
> > > port).
> > >
> > > Best Regards
> > >
> > > Rune Okstad
> > >
> > >
> > > Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > meldingsnyheter:38e1bc39.469304@forums.sybase.com...
> > > > Not a problem. Is this just a firewall or does it perform any ip
> > > > redirection/aliasing as well?
> > > >
> > > >
> > > > Carson
> > > >
> > > > ___________________________________________________________
> > > >
> > > > Carson Hager
> > > > Team Sybase
> > > > Dynamic Data Solutions, Inc.
> > > > Enterprise Application Studio 3.0 Consulting and Training
> > > > http://www.dyn-data.com
> > > >
> > > > DDS is now hiring EAServer consultants
> > > > to support its exploding EAServer business!
> > > > Please submit your resume to
> > > > hr@dyn-data.com!
> > > >
> > > >
> > > > On Wed, 29 Mar 2000 08:01:41 +0200, "Rune Okstad" <roks@online.no>
> > > > wrote:
> > > >
> > > > >I'm creating the connection in the start() method of the applet. Is
> > this
> > > a
> > > > >problem?
> > > > >
> > > > >The connection works 100% when the applet is not communicating with
> the
> > > > >Jaguar server component through the firewall.
> > > > >
> > > > >Best Regards
> > > > >
> > > > >Rune Okstad
> > > > >
> > > > >
> > > > >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > > >meldingsnyheter:38e13fdb.26092929@forums.sybase.com...
> > > > >> Are you possibly performing the connect in the init() method of
the
> > > > >> applet? The MS VM has a bug prohibiting the opening of a socket
in
> > > > >> that method. I would turn on the Java Console in IE for more
info.
> > > > >>
> > > > >>
> > > > >> Carson
> > > > >>
> > > > >> ___________________________________________________________
> > > > >>
> > > > >> Carson Hager
> > > > >> Team Sybase
> > > > >> Dynamic Data Solutions, Inc.
> > > > >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >> http://www.dyn-data.com
> > > > >>
> > > > >> DDS is now hiring EAServer consultants
> > > > >> to support its exploding EAServer business!
> > > > >> Please submit your resume to
> > > > >> hr@dyn-data.com!
> > > > >>
> > > > >>
> > > > >> On Tue, 28 Mar 2000 09:55:40 +0200, "Rune Okstad"
<roks@online.no>
> > > > >> wrote:
> > > > >>
> > > > >> >Hello!
> > > > >> >
> > > > >> >I'm experiencing a similar thing with our Jaguar installation.
> > > > >> >We have an applet instintiating and communicating with a
stateless
> > > Jaguar
> > > > >> >server component (EJB) via IIOP/CORBA (port 9000).
> > > > >> >When running the applet in Microsoft Internet Explorer through
our
> > > > >firewall,
> > > > >> >the instantiation of the component fails when trying to
establish
> > the
> > > > >> >session with the call
> > > > >> > "session = manager.createSession(user, password);". There is no
> > trace
> > > of
> > > > >> >the request in the Jaguar srvlog.
> > > > >> >When running the same applet, not through the firewall, it works
> > > > >perfectly.
> > > > >> >
> > > > >> >The strange thing is that we have no problem running Jaguar
> Manager
> > > > >through
> > > > >> >the firewall to the same port.
> > > > >> >We can also run the applet in the appletviewer and maket work
> > > perfectly,
> > > > >> >also through the firewall.
> > > > >> >
> > > > >> >
> > > > >> >Do you have any explanation on this behaviour?
> > > > >> >Could there be any security aspects of Microsoft Internet
Explorer
> > > > >combined
> > > > >> >with IP address conversion?
> > > > >> >
> > > > >> >
> > > > >> >Best Regards
> > > > >> >
> > > > >> >Rune Okstad
> > > > >> >
> > > > >> >
> > > > >> >
> > > > >> >Carson Hager[Team Sybase] <chager@dyn-data.com> skrev i
> > > > >> >meldingsnyheter:38deb6d5.4660130@forums.sybase.com...
> > > > >> >> >1) Do I only need to be concerned with Port 9000 or are there
> > more
> > > > >ports
> > > > >> >> >involved that must be forwarded through the firewall?
> > > > >> >>
> > > > >> >> That's the only one to be concerned with.
> > > > >> >>
> > > > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are
they
> > > special
> > > > >> >> >packets designed for IIOP (for example Microsoft created it's
> own
> > > > >packet
> > > > >> >GRE
> > > > >> >> >for doing VPN connections).
> > > > >> >>
> > > > >> >> They are standard tcp/ip packets.
> > > > >> >>
> > > > >> >> >3) Will this work using HTTP if IIOP fails to make it through
> the
> > > > >> >firewall.
> > > > >> >>
> > > > >> >> Yes.
> > > > >> >>
> > > > >> >> What error are you getting when you try to create the
instance?
> > > > >> >>
> > > > >> >>
> > > > >> >> Carson
> > > > >> >>
> > > > >> >> ___________________________________________________________
> > > > >> >>
> > > > >> >> Carson Hager
> > > > >> >> Team Sybase
> > > > >> >> Dynamic Data Solutions, Inc.
> > > > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >> >> http://www.dyn-data.com
> > > > >> >>
> > > > >> >> DDS is now hiring EAServer consultants
> > > > >> >> to support its exploding EAServer business!
> > > > >> >> Please submit your resume to
> > > > >> >> hr@dyn-data.com!
> > > > >> >>
> > > > >> >>
> > > > >> >> On Sun, 26 Mar 2000 14:28:57 -0500, "Brad Gawne"
> > > <bgawne@bralar.on.ca>
> > > > >> >> wrote:
> > > > >> >>
> > > > >> >> >Hi,
> > > > >> >> >
> > > > >> >> >Does anybody know if the IIOP protocol travels inside
standard
> > TCP
> > > or
> > > > >UDP
> > > > >> >> >packets or whether it has it's own packet type?
> > > > >> >> >
> > > > >> >> >I am trying to get an IIOP program (actually a PB program
using
> > an
> > > > >IIOP
> > > > >> >> >connection) to reach through a firewall by forwarding Port
> 9000
> > > > >requests
> > > > >> >to
> > > > >> >> >my Jag server. However my program seems unable to create
> > instances
> > > of
> > > > >> >> >objects on the Jag Server.
> > > > >> >> >
> > > > >> >> >In summary my questions are:
> > > > >> >> >
> > > > >> >> >1) Do I only need to be concerned with Port 9000 or are there
> > more
> > > > >ports
> > > > >> >> >involved that must be forwarded through the firewall?
> > > > >> >> >
> > > > >> >> >2) Are the TCP/IP packets standard UDP/TCP packets or are
they
> > > special
> > > > >> >> >packets designed for IIOP (for example Microsoft created it's
> own
> > > > >packet
> > > > >> >GRE
> > > > >> >> >for doing VPN connections).
> > > > >> >> >
> > > > >> >> >3) Will this work using HTTP if IIOP fails to make it through
> the
> > > > >> >firewall.
> > > > >> >> >
> > > > >> >> >Things to note:
> > > > >> >> >
> > > > >> >> >I have total control over the firewall and am currently
> > forwarding
> > > all
> > > > >> >port
> > > > >> >> >9000 UDP/TCP traffic to my Jag server for inbound
connections.
> > > > >> >> >
> > > > >> >> >Thanks for any help.
> > > > >> >> >
> > > > >> >> >
> > > > >> >> >Regards,
> > > > >> >> >Brad Gawne
> > > > >> >> >
> > > > >> >> >
> > > > >> >> >
> > > > >> >>
> > > > >> >>
> > > > >> >> ___________________________________________________________
> > > > >> >>
> > > > >> >> Carson Hager
> > > > >> >> Team Sybase
> > > > >> >> Dynamic Data Solutions, Inc.
> > > > >> >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >> >>
> > > > >> >> DDS Enterprise Application Framework
> > > > >> >> Available Now as Open Source!
> > > > >> >> http://www.dyn-data.com
> > > > >> >>
> > > > >> >
> > > > >> >
> > > > >>
> > > > >>
> > > > >> ___________________________________________________________
> > > > >>
> > > > >> Carson Hager
> > > > >> Team Sybase
> > > > >> Dynamic Data Solutions, Inc.
> > > > >> Enterprise Application Studio 3.0 Consulting and Training
> > > > >>
> > > > >> DDS Enterprise Application Framework
> > > > >> Available Now as Open Source!
> > > > >> http://www.dyn-data.com
> > > > >>
> > > > >
> > > > >
> > > >
> > > >
> > > > ___________________________________________________________
> > > >
> > > > Carson Hager
> > > > Team Sybase
> > > > Dynamic Data Solutions, Inc.
> > > > Enterprise Application Studio 3.0 Consulting and Training
> > > >
> > > > DDS Enterprise Application Framework
> > > > Available Now as Open Source!
> > > > http://www.dyn-data.com
> > > >
> > >
> > >
> >
> >
>
>