Sybase NNTP forums - End Of Life (EOL)

The NNTP forums from Sybase - forums.sybase.com - are now closed.

All new questions should be directed to the appropriate forum at the SAP Community Network (SCN).

Individual products have links to the respective forums on SCN, or you can go to SCN and search for your product in the search box (upper right corner) to find your specific developer center.

Firewall setting

2 posts in XC Real Time - Exchange Last posting was on 2003-10-10 07:38:34.0Z
Thomas Borelid Posted on 2003-10-09 13:35:58.0Z
From: "Thomas Borelid" <thomasb@datanat.se>
Newsgroups: XC_Real_Time.Exchange
Subject: Firewall setting
Date: Thu, 9 Oct 2003 15:35:58 +0200
Lines: 11
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
NNTP-Posting-Host: 195.42.214.148
Message-ID: <3f856521@solutions.advantagedatabase.com>
X-Trace: 9 Oct 2003 07:39:45 -0700, 195.42.214.148
Path: solutions.advantagedatabase.com!solutions.advantagedatabase.com!195.42.214.148
Xref: solutions.advantagedatabase.com XC_Real_Time.Exchange:4
Article PK: 1156946

What are the firewall setting if you have the 'Presentations Server' in DMZ
and 'Mail Provider' on LAN. We have try to have 135 TCP and span on
4000TCP-5000TCP, put then we get "Your session has expired" and it get very
slow. But if we have full open ports in firewall we get everything work fine
and fast. Could I have a security and communications documents for OBMG
RealTime Server?
//Thomas Borelid

thomasb@datanat.se


XTNDConnect Server Support Posted on 2003-10-10 07:38:34.0Z
Reply-To: "XTNDConnect Server Support" <xtndserver@extendedsystems.com>
From: "XTNDConnect Server Support" <xtndserver@extendedsystems.com>
Newsgroups: XC_Real_Time.Exchange
References: <3f856521@solutions.advantagedatabase.com>
Subject: Re: Firewall setting
Date: Fri, 10 Oct 2003 08:38:34 +0100
Lines: 59
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
NNTP-Posting-Host: 195.217.131.185
Message-ID: <3f8662b5@solutions.advantagedatabase.com>
X-Trace: 10 Oct 2003 01:41:41 -0700, 195.217.131.185
Path: solutions.advantagedatabase.com!solutions.advantagedatabase.com!195.217.131.185
Xref: solutions.advantagedatabase.com XC_Real_Time.Exchange:5
Article PK: 1156957

There is a knowledgebase article for this problem in the support section on
our web.

Problem:
RealTime authentication very slow or times out, once logged in works at
normal speed.:
Realtime is set up in a DMZ environment. The presentation (UI) component is
installed in the DMZ port 135 is correctly opened in both directions through
the inner firewall.

The Mail Provider Server has a range of ports specified and these are
correctly opened through the inner firewall in both directions.

Communication is seemingly normal but still the authentication takes up to
two minutes. Once authentication succeeds everything is fine.

Solution:
If there is a restricted port range through the inner firewall then you may
need to also restrict the port range used by DCOM on the presentation (UI)
machine.

Please see:

Section: "Restricting the Range of TCP Ports" at

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dndcom/html/msdn_dcomfirewall.asp


Make the adjustments to the registry as suggested by Microsoft (ensure that
you take the usual steps to back up your registry settings first).

Set the port range to the same range you specified on the UI server.



Best regards from


Jan

"Thomas Borelid" <thomasb@datanat.se> wrote in message
news:3f856521@solutions.advantagedatabase.com...
> What are the firewall setting if you have the 'Presentations Server' in
DMZ
> and 'Mail Provider' on LAN. We have try to have 135 TCP and span on
> 4000TCP-5000TCP, put then we get "Your session has expired" and it get
very
> slow. But if we have full open ports in firewall we get everything work
fine
> and fast. Could I have a security and communications documents for OBMG
> RealTime Server?
> //Thomas Borelid
>
> thomasb@datanat.se
>
>