About Proxies
Hi all
give me clear information about
what is proxies
why we go for proxies
when we go for ABAP proxy and Java proxy
How to configure ABAP proxy
How to configure Java proxy
How to debug a proxy
How to handle errors in Proxies
HI
We can use proxies to communicate with integration engine.
Proxies are objects (classes & methods) generated from a language.
Proxy communication starts with objects in integration repository and adapter communication starts with application system.
Out-Side In Development: Here we define language independent message interfaces in to integration repository. Then we can use proxy generation to create java or abap proxies.
Proxies communicate with the XI server by means of native SOAP calls over HTTP .RFC does not, so you have to convert from SOAP to RFC calls and vice versa. So XML conversion is required.
ABAP Proxies uses Webservice and Http Protocols.
If you use ABAP Proxy , you can reduce the overhead calling the function again and again.
What are Proxies?
Proxies: are interfaces which will get executed in the application system.They can be created only in the system from message interfaces using the proxy generation functions.
The biggest advantage of the proxy is that it always by passes the Adapter Engine and will directly interact with the application system and Integration engine - so it will and should give us a better performance.
The literal definition of a proxy is an object / process authorized to act for another; an agent or a substitute. In simpler terms, proxies in the XI context are objects used to encapsulate the creation (from a sender system) or parsing of XML (at a receiver system) as well as the communication with the relevant runtime components required to send or receive those messages. The Proxy Runtime controls these objects / processes, and can itself be controlled by the applications it communicates with.
What is Proxy communication.
The aim of proxy communication is to bypass the adapter engine thus providing an adapterless communication. With proxy you save on performance over using adapters and also it reduces complexity.
Where Proxy communication is used i.e in which type of systems or situations.
The Proxy currently has the following components available:
1. ABAP Proxy u2013 Communication using XI or Web Services
2. Java Proxyu2013 Communication using XI (J2EE)
JAVA Proxies:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f272165e-0401-0010-b4a1-e7eb8903501d
ABAP Proxies:
/people/sap.user72/blog/2005/12/13/integration-builders-through-proxy-server-part--2
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
/people/arulraja.ma/blog/2006/08/18/xi-reliable-messaging-150-eoio-in-abap-proxies
/people/stefan.grube/blog/2006/07/28/xi-debug-your-inbound-abap-proxy-implementation
/people/michal.krawczyk2/blog/2006/04/19/xi-rfc-or-abap-proxy-abap-proxies-with-attachments
/people/sukumar.natarajan/blog/2007/01/07/how-to-raise-alerts-from-abap-proxy
/people/sravya.talanki2/blog/2006/07/28/smarter-approach-for-coding-abap-proxies
ON SDN TV
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=abap%20proxy%20xi&cat=sdn_all&start=11#
Proxies communicate with the XI server by means of native SOAP calls over HTTP .RFC does not, so you have to convert from SOAP to RFC calls and vice versa. So XML conversion is required.
ABAP Proxies uses Webservice and Http Protocols. And if you use RFC it is mainly meant for Sync. call. But Proxies is used for both Sync and Async.
If you use ABAP Proxy , you can reduce the overhead calling the function again and again.
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies - Activate Proxy
/people/siva.maranani/blog/2005/04/03/abap-server-proxies - ABAP Server Proxy
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy - ABAP Client Proxy
Re: JDBC Sender select/update problem
What is the difference between server proxy and client proxy.
If u generate proxy for outbound interface then its client proxy and for inbound interface its server proxy.
In client proxy u can call the method to send messages but u can't modify it but in server proxy its possible to write a user code within the method to execute proxy.
CLIENT PROXY:
A WSDL description from a UDDI server (or an Internet page) is usually used to make a service executable in the Internet and to describe the interface of this service. You require a client proxy and not a server proxy to call this service by using the Web service infrastructure.
SERVER PROXY:
You can only generate ABAP server proxies from a WSDL description if they originate in the Integration Repository.You can also generate server proxies for Java and client proxies for ABAP from message interfaces.
There are two Types of proxies which can be done by ABAP or JAVA
u2018clientu2019 proxy is used by an application to send messages outside of the system it resides in (normally to the IS in this context).
u2018serveru2019 proxy is used by an application to receive messages from sources outside itself (again, normally the IS in this context).
To test a connection - /people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
Client Proxy - /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
Server Proxy - /people/siva.maranani/blog/2005/04/03/abap-server-proxies
Testing proxy - /people/stefan.grube/blog/2006/07/28/xi-debug-your-inbound-abap-proxy-implementation
JAVA Proxies:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f272165e-0401-0010-b4a1-e7eb8903501d
ABAP Proxies:
/people/sap.user72/blog/2005/12/13/integration-builders-through-proxy-server-part--2
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
/people/arulraja.ma/blog/2006/08/18/xi-reliable-messaging-150-eoio-in-abap-proxies
/people/stefan.grube/blog/2006/07/28/xi-debug-your-inbound-abap-proxy-implementation
/people/michal.krawczyk2/blog/2006/04/19/xi-rfc-or-abap-proxy-abap-proxies-with-attachments
/people/sukumar.natarajan/blog/2007/01/07/how-to-raise-alerts-from-abap-proxy
/people/sravya.talanki2/blog/2006/07/28/smarter-approach-for-coding-abap-proxies
ON SDN TV
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=abap%20proxy%20xi&cat=sdn_all&start=11#
Get back if u not getting these...
These blogs will answer all your questions
Proxies are nothing but interfaces , which will directly communicate witht he IS with out any adapter. these are adapter less communication
Proxies Help file
http://help.sap.com/saphelp_nw04/helpdata/en/86/58cd3b11571962e10000000a11402f/content.htm
How to Activate Abap Proxy
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
File to R3 via ABAP Server Proxy
/people/prateek.shah/blog/2005/06/14/file-to-r3-via-abap-proxy
ABAP Client proxy
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
As we know, the role of SAP XIu2019s integration broker is basically to integrate SAP and non-SAP systems, as in the integration of an SAP R/3 system with a database using adapters. SAP XI provides various adapters to integrate different types of systems.
But in some of real-time scenarios, itu2019s not always a particular type of business system that has to send/receive messages with SAPXI; it can also be an application like ABAP or Java. To cater to these needs, SAP XI provides different ways to generate interfaces in ABAP and JAVA u2013 and these interfaces are known as proxies.
ABAP proxies are generated using the transaction SPROXY (in SAP Web AS 6.20 and above); for Java proxies, the Integration Builder tool is used.
Basicly client & server are just diffrent terminology for sender and reciever (client being the sender and server the reciever), proxies are basicly program that begin in one SAP system and continue running at nother SAP system (with control ultimatly return to the original system).
It's a good way to create your own application "envelope" to activate any code you want and that is both its strong point and weak point (maintanance and flexability).
ABAP proxy can be used with WAS version greater than 6.20
If u r wondering why we need ABAP proxy when we have a RFC..the reason is hat the overhead incurred is less in case of proxy and swift execution too.
There is a cliet proxy and a server proxy
The chief distinction betwen the two is :
Client proxy: Calls a webservice on the internet
Server Proxy : Provides an inbound interface as a webservice
ABAP proxy generation is part of the SAP Web AS 6.40. ABAP proxy generation enables you to generate proxies to communicate by using the Web service infrastructure and by using SAP Exchange Infrastructure. ABAP proxies that were generated from message interfaces in the Integration Repository (IR) can be used in both infrastructures. This means that if none of the Integration Server services are required for a proxy-to-proxy communication scenario in ABAP, you can use a point-to-point connection using the Web service infrastructure instead.
u2022 Java proxy generation in the Integration Builder (Design) generates proxies from message interfaces in the Integration Repository. Java proxy generation packs the proxy objects in a Jar file, which you can save locally. You use the generated classes in J2EE applications on the SAP J2EE Engine.
Advantages of Proxies:
Basically proxies are used for adapter less communication & main purpose of it is to bypass adapter engine.
Proxy generation enables you to create proxies in application systems. Proxies encapsulate the creation or parsing of XML messages and the communication with the relevant runtime components required to send or receive the messages. The proxy runtime controls these processes and can itself be controlled in application programs by means of additional methods.
Since the communication between the sender and receiver is decoupled, you can use proxies to exchange messages with various different communication parties, and also by using adapters. However, this section of the documentation only discusses the programming model for the proxy runtime.
We can generate proxies out of the message interface (inbound/outbound) defined in Integration repository.
Proxy generation converts non-language specific interface descriptions in WSDL into executable interfaces know as proxies. Proxies are executable interfaces in the application system.
There are two kinds of proxies:
1) Java proxies - generated in IR from WSDL description of interface u2013 results in .jar file containing generated java classes.
2) ABAP proxies - generated in application server with SPROXY transaction based on WSDL representation of message interface.
Note: For WAS release lower than 6.20 adapters are the only means to establish
connection. From WAS 6.20, proxy generation feature enables application systems to communicate with XI using proxies. Proxies enable adapter-less
communication (native connectivity).
You can get details about PrProxy : Proxy is a structure where there is no processing function module associated. You need to explicitly write the Business Logic/Call the subroutines .
Choosing of RFC adapter depends on the version of the system we r going to communicate.
Using RFC Adapter is the only option when we have SAP system with WAS 6.1 or older.
RFC Adapter may not be considered as the best option when we have WAS 6.2 onwards.
Proxys bypasses adapter engine & they communicate directly with IE .
Thru proxys
You can handle large amount of data
You can handle error messages
if you want to reduce the work load over XI server
then the best way is avoiding protocol conversion which adapters does(XYZ format to XML format)
if we use proxy which will be deployed on local proxy engine which in turn does protocol conversion instead of giving the job to XI.
i.e is (XYZ to XML format is done by proxy runtime and passed to XI at XI no conversion is done)
go thru this link :
https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2162oxies [original link is broken] [original link is broken] [original link is broken] here..
.If you have a transfer the huge amount of data between two entities..you need to use Proxy..
ABAP proxies - generated in application server with SPROXY transaction based on WSDL representation of message interface
They are Client Proxy and Server proxy.
Client Proxy - When Java or R/3 is calling XI.
R/3 or Java -
> XI----
> Any Application
Server Proxy - When XI is calling Java or R/3
Any Application--> XI--
> R/3 or Java
Activating ABAP proxies:
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
XSD Data Types vs. ABAP Data Types -- Quick Reference u2013 Part I
XSD Data Types vs. ABAP Data Types - Quick Reference u2013 Part II
Client Proxy - /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
Server Proxy - /people/siva.maranani/blog/2005/04/03/abap-server-proxies
ABAP CLIENT PROXY
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
ABAP SERVER PROXY
/people/siva.maranani/blog/2005/04/03/abap-server-proxies
cheers
reward points if found useful
Similar Messages
-
Doubt about proxies implementation
hi experts i have small doubt about proxies implementation
1. if we r implementing client proxies, it means sap r/3(proxy)->>xi->>>file
system.here where we have to execute the SPROXY transaction. in sap r/3 or
in the xi server.and the next thing is where we have to write the report program
to trigger the interface.in sap r/3 or in the xi server.
2. if we r implementing server proxies, it means File->>xi->>>sap r/3
(proxy).here where we have to execute the SPROXY transaction. in sap r/3 or
in the xi server.
please clear me
Regards
giriSreeram,
The Integration Server and the client on which you generate the proxies should not be the same. If they are different then yes, you can use another client in your XI box itself to generate proxies and trigger the call to XI.
If you see this blog by Ravi ( incidentally he is my boss as well ) this is exactly what we have done as well.
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
When you say XI, you mean the Client on which the Integration Server is running! XI is basically a R3 instance with more functionality and its own Integration Engine.
Regards
Bhavesh -
Hi all,
Can any one explain me or give me a lnk to blog on how do we merge more than two IDOC to one file.
And also blogs,good links about proxies (ABAP).
Cheers,
KarthickHi,
check this links
XI: Debug your inbound ABAP Proxy implementation ---Debug your inbound ABAP Proxy implementation
Choose the Right Adapter to integrate with SAP systems
https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/1387--- [original link is broken] [original link is broken] [original link is broken] Client Proxy
https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/1457--- [original link is broken] [original link is broken] [original link is broken] Server Proxy
ABAP Proxy Runtime
Programming with Client and Server Proxies
Illustration of Multi-Mapping and Message Split using BPM in SAP Exchange Infrastructure
Various multi-mappings and Optimizing their Implementation in Integration Processes (BPM) in XI.
IDOCs (Multiple Types) Collection in BPM
https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2034Regards [original link is broken] [original link is broken] [original link is broken]
regards
vasu -
Hi All,
While Implementing Proxy----JDBC Scenario,
Q1) Where we need to create the Proxy ???? in XI Or In R/3 ???
Q2) What would be the sender service specified in Receiver determination, should it be the Business System Or a Business service.
Q3) Also let us know whether the report need to be written in R/3 or in XI to initiate the proxy.
Regards
BopannaHi Bopanna,
Q1) Proxy need to be created in R/3
Q2) Sender should be a Business system as a R/3 system is the sender in ur case
Q3)Report needs to be written in R/3
See these link
http://help.sap.com/saphelp_nw04s/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
Settings required for ABAP Proxies,
ABAP Proxies
Regards,
Divija. -
Can Java / ABAP proxies be used from a non-SAP system like a java program to send messages to XI. This java application won't have any XI related software.
If yes then aren't proxies equivalent to Web services clients?hi,
>>>>But, can a XI interface be exposed as a standard web services so that a WSDL can be used to generate proxies in any language?
sure
that's the idea how sender SOAP adapter works
you just create your interface like SOAP - IDOC in XI
and then from XI integration directory you can generate a WSDL
then you can use this WSDL in any programming language
like .Net or other java servers (AXIS etc) and create a program
that will call XI
more in:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/d23cbe11-0d01-0010-5287-873a22024f79
Regards,
michal -
Proxies and use of proxies in XI
hi all,
Can anybody help me this
what is proxies and how it will be helpfull in XI.
regards
manoj kumarHi Manoj,
You can get details about Proxies here..
http://help.sap.com/saphelp_nw04/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/content.htm
Also, the below links are helpful too...
http://help.sap.com/saphelp_nw04/helpdata/en/14/555f3c482a7331e10000000a114084/frameset.htm
/people/siva.maranani/blog/2005/04/03/abap-server-proxies
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
/people/prateek.shah/blog/2005/06/14/file-to-r3-via-abap-proxy
http://help.sap.com/saphelp_nw2004s/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
Hope this helps..
Please let me know if you need any more details...
Kiran.. -
Hi XIERS,
What is need that we go for proxies and how proxies exactly work
Regards
methaHi Metha,
We mainly use proxies for adapter less communication and we use proxies when the working ABAP sys >6.20 version. this helps to direclty communicate with
integration server without using Adapters.
There are two types of proxies
Java Proxy
Abap Proxy
pls do chk this links
*******************************ABOUT PROXIES************************************
http://help.sap.com/saphelp_bw30b/helpdata/en/64/30063c66171b3de10000000a11402f/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/91/de56456be146e791bf88188306aa57/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/2b/f49b21674e8c44940bb3beafd83d5c/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/85/78af1bf407434796aaf8dbd6d4e7b7/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/14/555f3c482a7331e10000000a114084/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/a5/1b5342d8a7be30e10000000a155106/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/a5/1b5342d8a7be30e10000000a155106/frameset.htm
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
/people/prasad.ulagappan2/blog/2005/06/27/asynchronous-inbound-java-proxy
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/7d4db211-0d01-0010-1e8e-9b07fc2113ab
http://help.sap.com/saphelp_bw30b/helpdata/en/64/30063c66171b3de10000000a11402f/content.htm
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70c7d0f7-153d-2a10-5d96-d334b67cd771
if found worth pls do the req
Thanx
Sampath -
I created a free forum (yeah I know, free forums suck) about three months ago and everything has been fine and about 3 days ago me and a bunch of members got kicked out and cannot log back in. It has completely locked us out of the forum. I am the admin and one of my moderators are kicked out. When I contacted the forum tech support they were sure it was my cookies because when I try to login it says I logged in successfully, but then the page reloads and says "You are not logged in" they told me to set it to always allow cookies. It's already set like that. I cleared the Cache too.
Everything they told me to do with the browser settings has not helped. I looked online about proxies but do not understand what to do with that. I'm on an intel based imac, running Snow Leopard and I just downloaded the latest update for Firefox before this happened, I'm just wondering if anyone thinks all these could be the problem?
I went into Safari and did the same thing with no results. I even did it at work on a Windows computer, changing cookies and whatnot and still nothing helped.
Other forum members can get in but about a handful of us can't. For a while I thought it was hackers. I felt like I have done everything I can think of with the browsers and the cookies, I'm at a loss. The forum admins take days to get back to me. Does anyone have any idea if this is an issues with cookies, cache or proxies? Thank you.If you switch proxies then cookies that you have may no longer be valid, so you may need to remove existing cookies or use a Private Browsing mode window.
-
hi all,
i want to know what is the exact advantage of proxies,
eg: file to RFC scenario.. we can do the scenario is two ways
1)using RFC adapter
2)abap proxy
what is the main use of doing the scenario using abap proxy
thanks,
Madhav Poosarla.We can generate proxies out of the message interface (inbound/outbound) defined in Integration repository.
Proxy generation converts non-language specific interface descriptions in WSDL into executable interfaces know as proxies. Proxies are executable interfaces in the application system.
There are two kinds of proxies:
1) Java proxies - generated in IR from WSDL description of interface results in .jar file containing generated java classes.
2) ABAP proxies - generated in application server with SPROXY transaction based on WSDL representation of message interface.
Note: For WAS release lower than 6.20 adapters are the only means to establish
connection. From WAS 6.20, proxy generation feature enables application systems to communicate with XI using proxies. Proxies enable adapter-less
communication (native connectivity).
You can get details about Proxies here..
http://help.sap.com/saphelp_nw04/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/content.htm
Also, the below links are helpful too...
http://help.sap.com/saphelp_nw04/helpdata/en/14/555f3c482a7331e10000000a114084/frameset.htm
/people/siva.maranani/blog/2005/04/03/abap-server-proxies
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
/people/prateek.shah/blog/2005/06/14/file-to-r3-via-abap-proxy
http://help.sap.com/saphelp_nw2004s/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
Please find the link for SProxy generation..
http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
Please read the below link to understand the use of proxies...
http://help.sap.com/saphelp_nw04/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/content.htm
Note: reward points if solution found helpfull
Regards
Chandrakanth.k -
Qustion about "proxy_Interfaces"
If I have the following setup:
Internal mail server 192.168.1.2
Nat'ed router 192.168.1.254 / 192.168.2.1 (int/ext)
External mailserver 192.168.2.2
and I want to set up the "proxy_interface" variable.
Is it correctly understood that I would use 192.168.2.1?
or are there more to be used?
HansHi Hans. Just a few comments here. You said earlier
that security was a priority.
Please note that I put in two corrections. They are CAPITALIZED so they are easier to spot.
For now it is essential that I don't leave anything wide open but really locking things down is perhaps not the number one issue at this time. Unless you can convince me otherwise.
As I said somewhere else I do have a general overwiev of these things but I do lack experience and knowledge of the details in these matters.
If that is the case you
really need to lock down the traffice allowed out of
the internal network. The first premise of security
config is to be restrictive, not permissive. Part of
the reason for this is to minimise the consequences
of a machine being compromised. (Doesn't matter
whether that it is a Mac or not)
You also need to layer your security. So use whatever
you can, wherever you can. If you want to see the
sort of problems that are there get hold of HenWen
<http://seiryu.home.comcast.net/henwen.html>, which
allows you to easily setup Snort
<http://www.snort.org/>, an intrusion detection
system on a Mac in a matter of minutes. You soon
realise what a hostile environment it is out there!
I will take a very good look at this software.
To the rest I do agree but...
This is a small firm with only 8 emplyoees. All of them are computer illiterate. So a security breach from within is possible but at the current state unlikely. Also none of the users have admin priviliges on their machines. This leaves us, I guess, with some malware being planted on the machines from the outside. As is, this is not likely but just in case, we are running virusbarrier. The router between the DMZ and the HSZ does not allow anything going in except HTTPS and SMTP. And we allow dialup VPN connections from the outside using long passwords.
Somehow I have a feeling though that you, by now, have a big smile on your face and that you are going to tell me about something I'm overlooking. Therefore I'm going to take a look at narrowing down outbound traffic but I had planned this to happen at a later stage and before more staff is added.
1) Internet TO DMZ. This is the traffic that the
router will allow from (initiated) outside to
snip
So what rules do they have for your connection? Make
sure they tie things down.
I guess none in particular...
So in short you are telling me to add a second router between the DMZ and the Internet. In this router I would have to allow throughput for VPN and HTTPS and set it's destination to the internal router. I would also have to allow ARD, POP and SMTP with a destination on the DMZ server.
There is one thing that comes to mind though. If I want to allow webmail access to both mailservers is that something I set up in Postfix or would that have to be set up in the routers firewall?
I suspect I'm asking for a way to route different domains to different webmail servers.
Or I could use the second NIC in the DMZ server to run a router function on it. At least while we are talking about the current low traffic levels? This would perhaps simplifie things regarding webmail?
2) DMZ to Internet. What outbound services does the
server need? DNS, HTTP and SMTP seem the likely
candidates.
For now everything is allowed outbound.
Don't You should take a restrictive approach if
security is an issue.
As I said before I suspect you have a big smile on your face by now and that you are going to tell me why my current approach is wrong.
3) DMZ to Internal Network. From what you have said
the only port needs to be SMTP and perhaps DNS?
For now I was thinking of HTTPS, SMTP and we also
allow VPN connections for some of our staff to the
router that separates the internal network from the
DMZ (NOT THE INTERNET)
That makes sense.
4) Internal Network to DMZ SMTP, HTTP, HTTPS and
DNS?
For now we allow everything outgoing.
Read what I say above. The restrictions are designed
to mitigate the risks of a machine getting
compromised.
As I mentioned before I wonder why...
snip
As is, I'm using VPN rather than SSH. The problem
with SSH is that each time you move to another
machine you have to reset the certificate. And to the
internal network I'm running ARD over VPN. I have to
check better on this but I believe I should be pretty
safe allowing direct ARD to the external SERVER (NOT ROUTER)
rather than embedding it in VPN.
Well you have to use SSH if you are connecting to the
DMZ server via a terminal session from the internal
network. Quite a few "secure" commands rely on, or
use, SSH.
Normally I use ARD to open a session on the server I need to administer and then I open a local terminal session in the ARD window. I used to use terminal to jump from server to server but I soon started having problems with corrupt certificates and/or permissions. So I started using ARD over VPN instead.
Snip
If security is an issue your really need to use a
proxy. Most software upgrade solutions these days
know about proxies.
Somehow this is something that has never been an actual issue and in my mind rather a nuisance so I look forward to hear why I should do things this way.
snip
Absolutely agree. Apple makes it easy to start and
then often people get stuck and struggle to find the
real "how tos". If you want to use the list server
software for instance, only use SA to turn it on.
Then do everything else from the web or command
line.
Reminds me of the feeling I had about Filemaker for about 15 years.
What is SA?
Server Admin. In one settings option for Mail you
just check the box for "Relay outgoing mail through
host" and pop in the name of the DMZ server.
I guess I was being a bit "thick" yesterday. But after doing some reading about postfix I've come to a point now where I have decided to use transport tables and skip the gui completely. Also the use of transport tables allows me to "hopefully" manage what mail is delivered locally without going first through the mail gateway.
snip
No, but doing it in SA is much easier. It puts the
right info into main.cf
Yes but it is missing quite a few variables that I would like to use. As you can see if you look over my first draft of my main.cf.
Hans -
Problem with Safari and Firefox opening some websites
In Firefox I have recently been getting:
THE CONNECTION IS RESET
The connection to the server was reset while the page was loading.
* The site could be temporarily unavailable or too busy. Try again in a few
moments.
* If you are unable to load any pages, check your computer's network
connection.
* If your computer or network is protected by a firewall or proxy, make sure
that Firefox is permitted to access the Web
Also a message in Safari:
"Safari can’t open the page because the server unexpectedly dropped the connection, which sometimes occurs when the server is busy. You might be able to open the page later."
It is only occurring with a few sites, but occurs on the same websites in both browsers.
I'm using an iMac, running OSX 10.4.11 and using Airport to connect to a Netgear wireless router.
I've emptied cashes, cleaned cookies, reset browsers etc, I've run MacScan, but the problem persists.
Having already done some on-line searches I have seen people talk about proxies, DNS and possible malware (though usually referring solutions to PC's.
Any one know of a fix for this?Hi,
Make sure your are running the latest version of Safari. From the Safari Menu Bar click: About Safari
The version number will be displayed there. You need to be using 4.0.4 If Safari needs updating go to your Apple Menu then click Software Updates.
Safari 4.0.4 requires the 2009-001 Security Update. Open System Preferences/Software Updates - Installed Updates. If that update is not listed go here.
http://support.apple.com/downloads/SecurityUpdate_2009_001__Tiger_PPC
Also, open System Preferences/Network. Select the tab. Make sure none of the boxes are
checked under: Select a proxy server to configure
Try disconnecting the router from it's power source for 5 minutes, reconnect the router and
restart your Mac.
Carolyn
Message was edited by: Carolyn Samit -
Better playback of Canon 5D Mark 2 footage in 4.1?
Hi,
since the update installations gives me errors all the time (my post here: http://forums.adobe.com/thread/439764?tstart=0 ), I can't verify this myself:
The readme of the PPro update say, that h.264 playback/handling is improved. So I was wondering, if the playback of native Canon 5D mark 2 files falls into this section also.
I'm not talking about proxies or cineform's neo etc. I mean the raw quicktime footage from the camera...native...
Since Canon annaunced yesterday that FULL MANUAL control (aperture, ISO, shutter) will be availible on june 2nd, this is pretty much the last (and 25p support in the cam) hurdle for editing the 5DII footage.
Please let us know!
MartinI would try it out right away, but I'm not able to update my Production Premium for about 4 hours now. Well, I can download it, but the instalation quits with 3 errors. I made an extra post about it, but so far nobody seems to have the same issue.
I read that somebody had some other issues with instalation, so maybe the uploded files aren't that "perfect" because adobe wanted it up by the end of may (like they said the would
I've seen a few comments on installation errors already. Hope that that gets solved. It would be tough finally getting the long-awaited 4.1, only to find that it would not install, and may even mess things up. Fingers X'ed here. I also hope that Adobe was 100% satisfied with their efforts, and there was no Midnight-coding, as it was headed out the door.
As for the footage from the Canon - I've only heard great things about it. Some of the after-market folk have already gotten on the bandwagon with all sorts of add-ons for it on the video side. There were a couple of interesting ads in last month's American Cinematographer. Apparently some companies feel that there will definitely be a market for "stuff" to use this camera and its lenses for doing some serious video work. Time will tell. Though I'm a Nikon-guy* on the still-side of life, this Canon does look sweet. Hope that 4.1 is all that users could ask for. Again, the fingers are X'ed.
Good luck,
Hunt
* since my wife went digital, all of her point-n-shoot still cameras have been Canon. Now, I do not store these in the same room with my Nikons, but I do like their choices better than what Nikon offers. -
HTTPS with Applet over Proxy Issue
An applet using HttpURLConnection within a Java Applet. The Connection is formulated as follows:
HttpURLConnection urlConn = (HttpURLConnection)destURL
.openConnection( );
urlConn.setDoOutput( true );
urlConn.setDoInput( true );
urlConn.setUseCaches( false );
urlConn.setAllowUserInteraction( false );
urlConn.setRequestProperty( "Content-type","multipart/form-data" );
urlConn.setRequestProperty( "Content-length","" + parameters.length( );This works fine with numerous proxy servers and other network
topologies, except one. The issue I am told occurs when we are trying to
connect over https. For background, my understanding is this causes the Java Plug-in to :
* invoke the http CONNECT command
* wait for the 200 OK indicating that the secure tunnel is established
* then send the request securely.
Doing a packet trace shows that the headers set in the code are
actually being included with the CONNECT. However the Java Plug
(1.4.2_06) does not sent the body with the CONNECT. I am told this
causes the proxy to wait for an entity that never arrives, because, on
the other end, the plug-in is waiting for 200 OK. After 8 secs the
plug-in resets the connection and fails.
Packet traces on other proxies show the same content-length header being
included, but they decide ignore it. From Googling I note some folks
claim that this is expected, because CONNECT is non-entity enclosing.
Doc's are scant on the CONNECT command. In some cases they seem to imply
that no data should go with the CONNECT (making it non-entity
enclosing), but later they state it supports data-pipelining, making the
content-length relevant, as the CONNECT may well contain an entity.
Moreover, is the intent of Applet Framework to insulate the programmer
from having to worry about issues like this? For example this Applet can
and does connect to a myriad of HTTP/1.1 or 1.0 server through a proxy
or not; in the case of no proxy or non secure proxy, the content-length
header is valid as the request goes out in one go with associated
headers. So writing the code as above, does not seem to be inherently
flawed, IMO. <-- And that is a question too :).
I note there is an isProxy() method, but this can only be determined
after connection (obviously) and parameters cannot be changed once the
connection is made. So creating a dummy connection first is possible I
suppose, but it seems a slippery slope to start coding for exceptions
like this, unless absolutely necessary.
On the face of it, it could be argued that this appears to be a bug in
the plug-in but with very little hits in google I am doubtful. To that
end, does anyone have any thoughts or experience with either working
around the problem (it would seem to be a pity to have to have a setting
per client), or whether in fact this proxy server is being too draconian
in its interpretation.
Thanks in advance,
Gary
Refs:
RFC2616
http://www.web-cache.com/Writings/Internet-Drafts/draft-luotonen-web-proxy-tunneling-01.txtPardon my ignorance about proxies, but how do you tell the plug-in that there is a proxy in between you and the destination?
The reason I ask is because with the https protocol, the first thing that happens is that an SSL connection is set up between the endpoints, and only after, through this secure tunnel, is the GET request or whatever sent. The proxy never gets to see any of the HTTP headers. -
AE is too heavy and how make it 'light'
hello guuysssss!
im working right now and im a some clip with a bunch of layers and each layer has a large size. im mad because everytime i tried to preview my clip it takes many times because is so heavy. how do i make this stuff more light for preview? what are the settings? just when im doing my work. and when it finished, just turn back all those settings so my clip not getting worse as im work with.. like maya. when we modeling, maya is so light for modeling. eventough we bulid many polygons. but when rendering, it takes so many times. im want to do the same way as maya in after effect. can i possible to do that?
my computer specs:
Macintosh 10.7 (a.k.a Lion)
Intel core i3 3.06ghz
4GB of RAM DDR3Samuel,
See this page for information about memory and improving performance in After Effects.
See this page for resources about making After Effects (and Premiere Pro) work faster.
Regarding your specific question about proxies, see this video.
As stated, 4GB is a terribly small amount of RAM for using After Effects. You say that you don't know how to add more RAM, but know that this is going to be a limitation in having After Effects work as smoothly as you may like. You'll need to pay special attention to the various techniques for improving performance to minimize the amount of RAM needed. -
How to listen to itunes radio at work?
Hi, can someone please help?!
I love listening to itunes radio but when I am at work for some reason it does not work.
I tried to research the subject but most of the posts are specific to a different problem or just mention something about proxies, but don't give detailed instructions.
I figure the problem is proxies since I am connected a network server and I have all the information and passwords needed, but I do not know how to fix this or where to fix this on my computer. The proxies that i have checked right now are the "web proxy" and "secure web proxy". i tried to turn both off and that didn't really seem to work either.
Please let me know what to do, and if that is not the problem please tell me what the problem is and how to fix it.
Thank You
m.Before you spend a lot of time spinning your wheels on this issue, I'd suggest you first talk to your company's IT department and ask if they're blocking access to streaming music sites. Many organizations do to prevent music streaming from hogging all their bandwidth.
If they tell you they're not blocking or throttling access, post back and we'll go from there.
Regards.
Maybe you are looking for
-
How can I re-activate my CS3 with connectivity issue?
I received a new MacbookPro for Xmas , migrated successfully but need to "re-activate" my CS3. when i open the app I get the activation screen but when i click "over internet", it attempts then gives me an "Activation-No Connection" screen that loops
-
EMAIL ATTACHMENTS - file too large
I tried emailing a catalog that's in a PDF format. It's file size is 12.29mg. I got a message that the file size was to large to send. Message stated that I needed to remove images so that file was than 10.0mg or that I could sign up for Windows Live
-
Exchange 2013 cached mode and Exchange 2010
Hi, We have issues with Outlook 2013 not getting new emails in inbox unless its restarted. It works fine when cache is turned off. The users are on same LAN as single Exchange 2010 backend server. Any ideas please? Celtic
-
Does anyone have a disc / installation file of Adobe Photoshop CS4 and may make it available or sell? I bought a group license in 2009, I've got serial number and certificate but unfortunately I've lost the cd. Now I have to re-install the applicatio
-
Motion tracking is not working for videos but works for images?
Motion tracking is not working for videos but works for images. When the videos is drop onto the tracking object the videos corner don't appear highlighted. I am working on windows 7 with version 13.1.