About Proxies

Hi all
give me clear information about
what is proxies
why we go for proxies
when we go for ABAP proxy and Java proxy
How to configure ABAP proxy
How to configure Java proxy
How to debug a proxy
How to handle errors in Proxies

HI
We can use proxies to communicate with integration engine.
Proxies are objects (classes & methods) generated from a language.
Proxy communication starts with objects in integration repository and adapter communication starts with application system.
Out-Side In Development: Here we define language independent message interfaces in to integration repository. Then we can use proxy generation to create java or abap proxies.
Proxies communicate with the XI server by means of native SOAP calls over HTTP .RFC does not, so you have to convert from SOAP to RFC calls and vice versa. So XML conversion is required.
ABAP Proxies uses Webservice and Http Protocols.
If you use ABAP Proxy , you can reduce the overhead calling the function again and again.
What are Proxies?
Proxies: are interfaces which will get executed in the application system.They can be created only in the system from message interfaces using the proxy generation functions.
The biggest advantage of the proxy is that it always by passes the Adapter Engine and will directly interact with the application system and Integration engine - so it will and should give us a better performance.
The literal definition of a proxy is an object / process authorized to act for another; an agent or a substitute. In simpler terms, proxies in the XI context are objects used to encapsulate the creation (from a sender system) or parsing of XML (at a receiver system) as well as the communication with the relevant runtime components required to send or receive those messages. The Proxy Runtime controls these objects / processes, and can itself be controlled by the applications it communicates with.
What is Proxy communication.
The aim of proxy communication is to bypass the adapter engine thus providing an adapterless communication. With proxy you save on performance over using adapters and also it reduces complexity.
Where Proxy communication is used i.e in which type of systems or situations.
The Proxy currently has the following components available:
1. ABAP Proxy u2013 Communication using XI or Web Services
2. Java Proxyu2013 Communication using XI (J2EE)
JAVA Proxies:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f272165e-0401-0010-b4a1-e7eb8903501d
ABAP Proxies:
/people/sap.user72/blog/2005/12/13/integration-builders-through-proxy-server-part--2
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
/people/arulraja.ma/blog/2006/08/18/xi-reliable-messaging-150-eoio-in-abap-proxies
/people/stefan.grube/blog/2006/07/28/xi-debug-your-inbound-abap-proxy-implementation
/people/michal.krawczyk2/blog/2006/04/19/xi-rfc-or-abap-proxy-abap-proxies-with-attachments
/people/sukumar.natarajan/blog/2007/01/07/how-to-raise-alerts-from-abap-proxy
/people/sravya.talanki2/blog/2006/07/28/smarter-approach-for-coding-abap-proxies
ON SDN TV
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=abap%20proxy%20xi&cat=sdn_all&start=11#
Proxies communicate with the XI server by means of native SOAP calls over HTTP .RFC does not, so you have to convert from SOAP to RFC calls and vice versa. So XML conversion is required.
ABAP Proxies uses Webservice and Http Protocols. And if you use RFC it is mainly meant for Sync. call. But Proxies is used for both Sync and Async.
If you use ABAP Proxy , you can reduce the overhead calling the function again and again.
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies - Activate Proxy
/people/siva.maranani/blog/2005/04/03/abap-server-proxies - ABAP Server Proxy
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy - ABAP Client Proxy
Re: JDBC Sender select/update problem
What is the difference between server proxy and client proxy.
If u generate proxy for outbound interface then its client proxy and for inbound interface its server proxy.
In client proxy u can call the method to send messages but u can't modify it but in server proxy its possible to write a user code within the method to execute proxy.
CLIENT PROXY:
A WSDL description from a UDDI server (or an Internet page) is usually used to make a service executable in the Internet and to describe the interface of this service. You require a client proxy and not a server proxy to call this service by using the Web service infrastructure.
SERVER PROXY:
You can only generate ABAP server proxies from a WSDL description if they originate in the Integration Repository.You can also generate server proxies for Java and client proxies for ABAP from message interfaces.
There are two Types of proxies which can be done by ABAP or JAVA
u2018clientu2019 proxy is used by an application to send messages outside of the system it resides in (normally to the IS in this context).
u2018serveru2019 proxy is used by an application to receive messages from sources outside itself (again, normally the IS in this context).
To test a connection - /people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
Client Proxy - /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
Server Proxy - /people/siva.maranani/blog/2005/04/03/abap-server-proxies
Testing proxy - /people/stefan.grube/blog/2006/07/28/xi-debug-your-inbound-abap-proxy-implementation
JAVA Proxies:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f272165e-0401-0010-b4a1-e7eb8903501d
ABAP Proxies:
/people/sap.user72/blog/2005/12/13/integration-builders-through-proxy-server-part--2
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
/people/arulraja.ma/blog/2006/08/18/xi-reliable-messaging-150-eoio-in-abap-proxies
/people/stefan.grube/blog/2006/07/28/xi-debug-your-inbound-abap-proxy-implementation
/people/michal.krawczyk2/blog/2006/04/19/xi-rfc-or-abap-proxy-abap-proxies-with-attachments
/people/sukumar.natarajan/blog/2007/01/07/how-to-raise-alerts-from-abap-proxy
/people/sravya.talanki2/blog/2006/07/28/smarter-approach-for-coding-abap-proxies
ON SDN TV
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=abap%20proxy%20xi&cat=sdn_all&start=11#
Get back if u not getting these...
These blogs will answer all your questions
Proxies are nothing but interfaces , which will directly communicate witht he IS with out any adapter. these are adapter less communication
Proxies Help file
http://help.sap.com/saphelp_nw04/helpdata/en/86/58cd3b11571962e10000000a11402f/content.htm
How to Activate Abap Proxy
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
File to R3 via ABAP Server Proxy
/people/prateek.shah/blog/2005/06/14/file-to-r3-via-abap-proxy
ABAP Client proxy
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
As we know, the role of SAP XIu2019s integration broker is basically to integrate SAP and non-SAP systems, as in the integration of an SAP R/3 system with a database using adapters. SAP XI provides various adapters to integrate different types of systems.
But in some of real-time scenarios, itu2019s not always a particular type of business system that has to send/receive messages with SAPXI; it can also be an application like ABAP or Java. To cater to these needs, SAP XI provides different ways to generate interfaces in ABAP and JAVA u2013 and these interfaces are known as proxies.
ABAP proxies are generated using the transaction SPROXY (in SAP Web AS 6.20 and above); for Java proxies, the Integration Builder tool is used.
Basicly client & server are just diffrent terminology for sender and reciever (client being the sender and server the reciever), proxies are basicly program that begin in one SAP system and continue running at nother SAP system (with control ultimatly return to the original system).
It's a good way to create your own application "envelope" to activate any code you want and that is both its strong point and weak point (maintanance and flexability).
ABAP proxy can be used with WAS version greater than 6.20
If u r wondering why we need ABAP proxy when we have a RFC..the reason is hat the overhead incurred is less in case of proxy and swift execution too.
There is a cliet proxy and a server proxy
The chief distinction betwen the two is :
Client proxy: Calls a webservice on the internet
Server Proxy : Provides an inbound interface as a webservice
ABAP proxy generation is part of the SAP Web AS 6.40. ABAP proxy generation enables you to generate proxies to communicate by using the Web service infrastructure and by using SAP Exchange Infrastructure. ABAP proxies that were generated from message interfaces in the Integration Repository (IR) can be used in both infrastructures. This means that if none of the Integration Server services are required for a proxy-to-proxy communication scenario in ABAP, you can use a point-to-point connection using the Web service infrastructure instead.
u2022 Java proxy generation in the Integration Builder (Design) generates proxies from message interfaces in the Integration Repository. Java proxy generation packs the proxy objects in a Jar file, which you can save locally. You use the generated classes in J2EE applications on the SAP J2EE Engine.
Advantages of Proxies:
Basically proxies are used for adapter less communication & main purpose of it is to bypass adapter engine.
Proxy generation enables you to create proxies in application systems. Proxies encapsulate the creation or parsing of XML messages and the communication with the relevant runtime components required to send or receive the messages. The proxy runtime controls these processes and can itself be controlled in application programs by means of additional methods.
Since the communication between the sender and receiver is decoupled, you can use proxies to exchange messages with various different communication parties, and also by using adapters. However, this section of the documentation only discusses the programming model for the proxy runtime.
We can generate proxies out of the message interface (inbound/outbound) defined in Integration repository.
Proxy generation converts non-language specific interface descriptions in WSDL into executable interfaces know as proxies. Proxies are executable interfaces in the application system.
There are two kinds of proxies:
1) Java proxies - generated in IR from WSDL description of interface u2013 results in .jar file containing generated java classes.
2) ABAP proxies - generated in application server with SPROXY transaction based on WSDL representation of message interface.
Note: For WAS release lower than 6.20 adapters are the only means to establish
connection. From WAS 6.20, proxy generation feature enables application systems to communicate with XI using proxies. Proxies enable adapter-less
communication (native connectivity).
You can get details about PrProxy : Proxy is a structure where there is no processing function module associated. You need to explicitly write the Business Logic/Call the subroutines .
Choosing of RFC adapter depends on the version of the system we r going to communicate.
Using RFC Adapter is the only option when we have SAP system with WAS 6.1 or older.
RFC Adapter may not be considered as the best option when we have WAS 6.2 onwards.
Proxys bypasses adapter engine & they communicate directly with IE .
Thru proxys
You can handle large amount of data
You can handle error messages
if you want to reduce the work load over XI server
then the best way is avoiding protocol conversion which adapters does(XYZ format to XML format)
if we use proxy which will be deployed on local proxy engine which in turn does protocol conversion instead of giving the job to XI.
i.e is (XYZ to XML format is done by proxy runtime and passed to XI at XI no conversion is done)
go thru this link :
https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2162oxies [original link is broken] [original link is broken] [original link is broken] here..
.If you have a transfer the huge amount of data between two entities..you need to use Proxy..
ABAP proxies - generated in application server with SPROXY transaction based on WSDL representation of message interface
They are Client Proxy and Server proxy.
Client Proxy - When Java or R/3 is calling XI.
R/3 or Java -
> XI----
> Any Application
Server Proxy - When XI is calling Java or R/3
Any Application--> XI--
> R/3 or Java
Activating ABAP proxies:
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
XSD Data Types vs. ABAP Data Types -- Quick Reference u2013 Part I
XSD Data Types vs. ABAP Data Types - Quick Reference u2013 Part II
Client Proxy - /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
Server Proxy - /people/siva.maranani/blog/2005/04/03/abap-server-proxies
ABAP CLIENT PROXY
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
ABAP SERVER PROXY
/people/siva.maranani/blog/2005/04/03/abap-server-proxies
cheers
reward points if found useful

Similar Messages

  • Doubt about proxies implementation

    hi experts i have small doubt about proxies implementation
    1. if we r implementing client proxies, it means sap r/3(proxy)->>xi->>>file
         system.here where we have to execute the SPROXY  transaction. in sap r/3 or
         in the xi server.and the next thing is where we have to write the report program
         to trigger the interface.in sap r/3 or in the xi server.
    2. if we r implementing server proxies, it means File->>xi->>>sap r/3
        (proxy).here where we have to execute the SPROXY  transaction. in sap r/3 or
         in the xi server.
    please clear me
    Regards
    giri

    Sreeram,
    The Integration Server and the client on which you generate the proxies should not be the same. If they are different then yes, you can use another client in your XI box itself to generate proxies and trigger the call to XI.
    If you see this blog by Ravi ( incidentally he is my boss as well ) this is exactly what we have done as well.
    /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
    When you say XI, you mean the Client on which the Integration Server is running! XI is basically a R3 instance with more functionality and its own Integration Engine.
    Regards
    Bhavesh

  • About proxies and IDOC

    Hi all,
    Can any one explain me or give me a lnk to blog on how do we merge more than two IDOC to one file.
    And also blogs,good links about proxies (ABAP).
    Cheers,
    Karthick

    Hi,
    check this links
    XI: Debug your inbound ABAP Proxy implementation  ---Debug your inbound ABAP Proxy implementation
    Choose the Right Adapter to integrate with SAP systems
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/1387--- [original link is broken] [original link is broken] [original link is broken] Client Proxy
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/1457--- [original link is broken] [original link is broken] [original link is broken] Server Proxy
    ABAP Proxy Runtime
    Programming with Client and Server Proxies
    Illustration of Multi-Mapping and Message Split using BPM in SAP Exchange Infrastructure
    Various multi-mappings and Optimizing their Implementation in Integration Processes (BPM) in XI.
    IDOCs (Multiple Types) Collection in BPM
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2034Regards [original link is broken] [original link is broken] [original link is broken]
    regards
    vasu

  • Doubt about Proxies

    Hi All,
    While Implementing Proxy----JDBC Scenario,
    Q1) Where we need to create the Proxy ???? in XI Or In R/3 ???
    Q2) What would be the sender service specified in Receiver determination, should it be the Business System Or a Business service.
    Q3) Also let us know whether the report need to be written in R/3 or in XI to initiate the proxy.
    Regards
    Bopanna

    Hi Bopanna,
    Q1) Proxy need to be created in R/3
    Q2) Sender should be a Business system as a R/3 system is the sender in ur case
    Q3)Report needs to be written in R/3
    See these link
    http://help.sap.com/saphelp_nw04s/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
    Settings required for ABAP Proxies,
    ABAP Proxies
    Regards,
    Divija.

  • Question about Proxies

    Can Java / ABAP proxies be used from a non-SAP system like a java program to send messages to XI. This java application won't have any XI related software.
    If yes then aren't proxies equivalent to Web services clients?

    hi,
    >>>>But, can a XI interface be exposed as a standard web services so that a WSDL can be used to generate proxies in any language?
    sure
    that's the idea how sender SOAP adapter works
    you just create your interface like SOAP - IDOC in XI
    and then from XI integration directory you can generate a WSDL
    then you can use this WSDL in any programming language
    like .Net or other java servers (AXIS etc) and create a program
    that will call XI
    more in:
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/d23cbe11-0d01-0010-5287-873a22024f79
    Regards,
    michal

  • Proxies and use of proxies in XI

    hi all,
    Can anybody help me this
    what is proxies and how it will be helpfull in XI.
    regards
    manoj kumar

    Hi Manoj,
       You can get details about Proxies here..
    http://help.sap.com/saphelp_nw04/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/content.htm
    Also, the below links are helpful too...
    http://help.sap.com/saphelp_nw04/helpdata/en/14/555f3c482a7331e10000000a114084/frameset.htm
    /people/siva.maranani/blog/2005/04/03/abap-server-proxies
    /people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
    /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
    /people/prateek.shah/blog/2005/06/14/file-to-r3-via-abap-proxy
    http://help.sap.com/saphelp_nw2004s/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
    Hope this helps..
    Please let me know if you need any more details...
    Kiran..

  • Abt proxies

    Hi XIERS,
    What is need that we go for proxies and how proxies exactly work
    Regards
    metha

    Hi Metha,
    We mainly use proxies for adapter less communication and we use proxies when the working ABAP sys >6.20 version. this helps to direclty communicate with
    integration server without using Adapters.
    There are two types of proxies
    Java Proxy
    Abap Proxy
    pls do chk this links
      *******************************ABOUT PROXIES************************************
    http://help.sap.com/saphelp_bw30b/helpdata/en/64/30063c66171b3de10000000a11402f/content.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/91/de56456be146e791bf88188306aa57/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/2b/f49b21674e8c44940bb3beafd83d5c/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/85/78af1bf407434796aaf8dbd6d4e7b7/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/14/555f3c482a7331e10000000a114084/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/a5/1b5342d8a7be30e10000000a155106/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/a5/1b5342d8a7be30e10000000a155106/frameset.htm
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
    /people/prasad.ulagappan2/blog/2005/06/27/asynchronous-inbound-java-proxy
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/7d4db211-0d01-0010-1e8e-9b07fc2113ab
    http://help.sap.com/saphelp_bw30b/helpdata/en/64/30063c66171b3de10000000a11402f/content.htm
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70c7d0f7-153d-2a10-5d96-d334b67cd771
    if found worth pls do the req
    Thanx
    Sampath

  • Cookies and proxies

    I created a free forum (yeah I know, free forums suck) about three months ago and everything has been fine and about 3 days ago me and a bunch of members got kicked out and cannot log back in. It has completely locked us out of the forum. I am the admin and one of my moderators are kicked out. When I contacted the forum tech support they were sure it was my cookies because when I try to login it says I logged in successfully, but then the page reloads and says "You are not logged in" they told me to set it to always allow cookies. It's already set like that. I cleared the Cache too.
    Everything they told me to do with the browser settings has not helped. I looked online about proxies but do not understand what to do with that. I'm on an intel based imac, running Snow Leopard and I just downloaded the latest update for Firefox before this happened, I'm just wondering if anyone thinks all these could be the problem?
    I went into Safari and did the same thing with no results. I even did it at work on a Windows computer, changing cookies and whatnot and still nothing helped.
    Other forum members can get in but about a handful of us can't. For a while I thought it was hackers. I felt like I have done everything I can think of with the browsers and the cookies, I'm at a loss. The forum admins take days to get back to me. Does anyone have any idea if this is an issues with cookies, cache or proxies? Thank you.

    If you switch proxies then cookies that you have may no longer be valid, so you may need to remove existing cookies or use a Private Browsing mode window.

  • Advantage of Proxies?

    hi all,
    i want to know what is the exact advantage of proxies,
    eg: file to RFC scenario.. we can do the scenario is two ways
    1)using RFC adapter
    2)abap proxy
    what is the main use of doing the scenario using abap proxy
    thanks,
    Madhav Poosarla.

    We can generate proxies out of the message interface (inbound/outbound) defined in Integration repository.
    Proxy generation converts non-language specific interface descriptions in WSDL into executable interfaces know as proxies. Proxies are executable interfaces in the application system.
    There are two kinds of proxies:
    1) Java proxies - generated in IR from WSDL description of interface – results in .jar file containing generated java classes.
    2) ABAP proxies - generated in application server with SPROXY transaction based on WSDL representation of message interface.
    Note: For WAS release lower than 6.20 adapters are the only means to establish
    connection. From WAS 6.20, proxy generation feature enables application systems to communicate with XI using proxies. Proxies enable adapter-less
    communication (native connectivity).
    You can get details about Proxies here..
    http://help.sap.com/saphelp_nw04/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/content.htm
    Also, the below links are helpful too...
    http://help.sap.com/saphelp_nw04/helpdata/en/14/555f3c482a7331e10000000a114084/frameset.htm
    /people/siva.maranani/blog/2005/04/03/abap-server-proxies
    /people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
    /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
    /people/prateek.shah/blog/2005/06/14/file-to-r3-via-abap-proxy
    http://help.sap.com/saphelp_nw2004s/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
    Please find the link for SProxy generation..
    http://help.sap.com/saphelp_nw04/helpdata/en/ba/f21a403233dd5fe10000000a155106/frameset.htm
    Please read the below link to understand the use of proxies...
    http://help.sap.com/saphelp_nw04/helpdata/en/48/d5a1fe5f317a4e8e35801ed2c88246/content.htm
    Note: reward points if solution found helpfull
    Regards
    Chandrakanth.k

  • Qustion about "proxy_Interfaces"

    If I have the following setup:
    Internal mail server 192.168.1.2
    Nat'ed router 192.168.1.254 / 192.168.2.1 (int/ext)
    External mailserver 192.168.2.2
    and I want to set up the "proxy_interface" variable.
    Is it correctly understood that I would use 192.168.2.1?
    or are there more to be used?
    Hans

    Hi Hans. Just a few comments here. You said earlier
    that security was a priority.
    Please note that I put in two corrections. They are CAPITALIZED so they are easier to spot.
    For now it is essential that I don't leave anything wide open but really locking things down is perhaps not the number one issue at this time. Unless you can convince me otherwise.
    As I said somewhere else I do have a general overwiev of these things but I do lack experience and knowledge of the details in these matters.
    If that is the case you
    really need to lock down the traffice allowed out of
    the internal network. The first premise of security
    config is to be restrictive, not permissive. Part of
    the reason for this is to minimise the consequences
    of a machine being compromised. (Doesn't matter
    whether that it is a Mac or not)
    You also need to layer your security. So use whatever
    you can, wherever you can. If you want to see the
    sort of problems that are there get hold of HenWen
    <http://seiryu.home.comcast.net/henwen.html>, which
    allows you to easily setup Snort
    <http://www.snort.org/>, an intrusion detection
    system on a Mac in a matter of minutes. You soon
    realise what a hostile environment it is out there!
    I will take a very good look at this software.
    To the rest I do agree but...
    This is a small firm with only 8 emplyoees. All of them are computer illiterate. So a security breach from within is possible but at the current state unlikely. Also none of the users have admin priviliges on their machines. This leaves us, I guess, with some malware being planted on the machines from the outside. As is, this is not likely but just in case, we are running virusbarrier. The router between the DMZ and the HSZ does not allow anything going in except HTTPS and SMTP. And we allow dialup VPN connections from the outside using long passwords.
    Somehow I have a feeling though that you, by now, have a big smile on your face and that you are going to tell me about something I'm overlooking. Therefore I'm going to take a look at narrowing down outbound traffic but I had planned this to happen at a later stage and before more staff is added.
    1) Internet TO DMZ. This is the traffic that the
    router will allow from (initiated) outside to
    snip
    So what rules do they have for your connection? Make
    sure they tie things down.
    I guess none in particular...
    So in short you are telling me to add a second router between the DMZ and the Internet. In this router I would have to allow throughput for VPN and HTTPS and set it's destination to the internal router. I would also have to allow ARD, POP and SMTP with a destination on the DMZ server.
    There is one thing that comes to mind though. If I want to allow webmail access to both mailservers is that something I set up in Postfix or would that have to be set up in the routers firewall?
    I suspect I'm asking for a way to route different domains to different webmail servers.
    Or I could use the second NIC in the DMZ server to run a router function on it. At least while we are talking about the current low traffic levels? This would perhaps simplifie things regarding webmail?
    2) DMZ to Internet. What outbound services does the
    server need? DNS, HTTP and SMTP seem the likely
    candidates.
    For now everything is allowed outbound.
    Don't You should take a restrictive approach if
    security is an issue.
    As I said before I suspect you have a big smile on your face by now and that you are going to tell me why my current approach is wrong.
    3) DMZ to Internal Network. From what you have said
    the only port needs to be SMTP and perhaps DNS?
    For now I was thinking of HTTPS, SMTP and we also
    allow VPN connections for some of our staff to the
    router that separates the internal network from the
    DMZ (NOT THE INTERNET)
    That makes sense.
    4) Internal Network to DMZ SMTP, HTTP, HTTPS and
    DNS?
    For now we allow everything outgoing.
    Read what I say above. The restrictions are designed
    to mitigate the risks of a machine getting
    compromised.
    As I mentioned before I wonder why...
    snip
    As is, I'm using VPN rather than SSH. The problem
    with SSH is that each time you move to another
    machine you have to reset the certificate. And to the
    internal network I'm running ARD over VPN. I have to
    check better on this but I believe I should be pretty
    safe allowing direct ARD to the external SERVER (NOT ROUTER)
    rather than embedding it in VPN.
    Well you have to use SSH if you are connecting to the
    DMZ server via a terminal session from the internal
    network. Quite a few "secure" commands rely on, or
    use, SSH.
    Normally I use ARD to open a session on the server I need to administer and then I open a local terminal session in the ARD window. I used to use terminal to jump from server to server but I soon started having problems with corrupt certificates and/or permissions. So I started using ARD over VPN instead.
    Snip
    If security is an issue your really need to use a
    proxy. Most software upgrade solutions these days
    know about proxies.
    Somehow this is something that has never been an actual issue and in my mind rather a nuisance so I look forward to hear why I should do things this way.
    snip
    Absolutely agree. Apple makes it easy to start and
    then often people get stuck and struggle to find the
    real "how tos". If you want to use the list server
    software for instance, only use SA to turn it on.
    Then do everything else from the web or command
    line.
    Reminds me of the feeling I had about Filemaker for about 15 years.
    What is SA?
    Server Admin. In one settings option for Mail you
    just check the box for "Relay outgoing mail through
    host" and pop in the name of the DMZ server.
    I guess I was being a bit "thick" yesterday. But after doing some reading about postfix I've come to a point now where I have decided to use transport tables and skip the gui completely. Also the use of transport tables allows me to "hopefully" manage what mail is delivered locally without going first through the mail gateway.
    snip
    No, but doing it in SA is much easier. It puts the
    right info into main.cf
    Yes but it is missing quite a few variables that I would like to use. As you can see if you look over my first draft of my main.cf.
    Hans

  • Problem with Safari and Firefox opening some websites

    In Firefox I have recently been getting:
    THE CONNECTION IS RESET
    The connection to the server was reset while the page was loading.
    * The site could be temporarily unavailable or too busy. Try again in a few
    moments.
    * If you are unable to load any pages, check your computer's network
    connection.
    * If your computer or network is protected by a firewall or proxy, make sure
    that Firefox is permitted to access the Web
    Also a message in Safari:
    "Safari can’t open the page because the server unexpectedly dropped the connection, which sometimes occurs when the server is busy. You might be able to open the page later."
    It is only occurring with a few sites, but occurs on the same websites in both browsers.
    I'm using an iMac, running OSX 10.4.11 and using Airport to connect to a Netgear wireless router.
    I've emptied cashes, cleaned cookies, reset browsers etc, I've run MacScan, but the problem persists.
    Having already done some on-line searches I have seen people talk about proxies, DNS and possible malware (though usually referring solutions to PC's.
    Any one know of a fix for this?

    Hi,
    Make sure your are running the latest version of Safari. From the Safari Menu Bar click: About Safari
    The version number will be displayed there. You need to be using 4.0.4 If Safari needs updating go to your Apple Menu then click Software Updates.
    Safari 4.0.4 requires the 2009-001 Security Update. Open System Preferences/Software Updates - Installed Updates. If that update is not listed go here.
    http://support.apple.com/downloads/SecurityUpdate_2009_001__Tiger_PPC
    Also, open System Preferences/Network. Select the tab. Make sure none of the boxes are
    checked under: Select a proxy server to configure
    Try disconnecting the router from it's power source for 5 minutes, reconnect the router and
    restart your Mac.
    Carolyn
    Message was edited by: Carolyn Samit

  • Better playback of  Canon 5D Mark 2 footage in 4.1?

    Hi,
    since the update installations gives me errors all the time (my post here: http://forums.adobe.com/thread/439764?tstart=0 ), I can't verify this myself:
    The readme of the PPro update say, that h.264 playback/handling is improved. So I was wondering, if the playback of native Canon 5D mark 2 files falls into this section also.
    I'm not talking about proxies or cineform's neo etc. I mean the raw quicktime footage from the camera...native...
    Since Canon annaunced yesterday that FULL MANUAL control (aperture, ISO, shutter) will be availible on june 2nd, this is pretty much the last (and 25p support in the cam) hurdle for editing the 5DII footage.
    Please let us know!
    Martin

    I would try it out right away, but I'm not able to update my Production Premium for about 4 hours now. Well, I can download it, but the instalation quits with 3 errors. I made an extra post about it, but so far nobody seems to have the same issue.
    I read that somebody had some other issues with instalation, so maybe the uploded files aren't that "perfect" because adobe wanted it up by the end of may (like they said the would
    I've seen a few comments on installation errors already. Hope that that gets solved. It would be tough finally getting the long-awaited 4.1, only to find that it would not install, and may even mess things up. Fingers X'ed here. I also hope that Adobe was 100% satisfied with their efforts, and there was no Midnight-coding, as it was headed out the door.
    As for the footage from the Canon - I've only heard great things about it. Some of the after-market folk have already gotten on the bandwagon with all sorts of add-ons for it on the video side. There were a couple of interesting ads in last month's American Cinematographer. Apparently some companies feel that there will definitely be a market for "stuff" to use this camera and its lenses for doing some serious video work. Time will tell. Though I'm a Nikon-guy* on the still-side of life, this Canon does look sweet. Hope that 4.1 is all that users could ask for. Again, the fingers are X'ed.
    Good luck,
    Hunt
    * since my wife went digital, all of her point-n-shoot still cameras have been Canon. Now, I do not store these in the same room with my Nikons, but I do like their choices better than what Nikon offers.

  • HTTPS with Applet over Proxy Issue

    An applet using HttpURLConnection within a Java Applet. The Connection is formulated as follows:
    HttpURLConnection urlConn = (HttpURLConnection)destURL
                             .openConnection( );
    urlConn.setDoOutput( true );
    urlConn.setDoInput( true );
    urlConn.setUseCaches( false );
    urlConn.setAllowUserInteraction( false );
    urlConn.setRequestProperty( "Content-type","multipart/form-data" );
    urlConn.setRequestProperty( "Content-length","" + parameters.length( );This works fine with numerous proxy servers and other network
    topologies, except one. The issue I am told occurs when we are trying to
    connect over https. For background, my understanding is this causes the Java Plug-in to :
    * invoke the http CONNECT command
    * wait for the 200 OK indicating that the secure tunnel is established
    * then send the request securely.
    Doing a packet trace shows that the headers set in the code are
    actually being included with the CONNECT. However the Java Plug
    (1.4.2_06) does not sent the body with the CONNECT. I am told this
    causes the proxy to wait for an entity that never arrives, because, on
    the other end, the plug-in is waiting for 200 OK. After 8 secs the
    plug-in resets the connection and fails.
    Packet traces on other proxies show the same content-length header being
    included, but they decide ignore it. From Googling I note some folks
    claim that this is expected, because CONNECT is non-entity enclosing.
    Doc's are scant on the CONNECT command. In some cases they seem to imply
    that no data should go with the CONNECT (making it non-entity
    enclosing), but later they state it supports data-pipelining, making the
    content-length relevant, as the CONNECT may well contain an entity.
    Moreover, is the intent of Applet Framework to insulate the programmer
    from having to worry about issues like this? For example this Applet can
    and does connect to a myriad of HTTP/1.1 or 1.0 server through a proxy
    or not; in the case of no proxy or non secure proxy, the content-length
    header is valid as the request goes out in one go with associated
    headers. So writing the code as above, does not seem to be inherently
    flawed, IMO. <-- And that is a question too :).
    I note there is an isProxy() method, but this can only be determined
    after connection (obviously) and parameters cannot be changed once the
    connection is made. So creating a dummy connection first is possible I
    suppose, but it seems a slippery slope to start coding for exceptions
    like this, unless absolutely necessary.
    On the face of it, it could be argued that this appears to be a bug in
    the plug-in but with very little hits in google I am doubtful. To that
    end, does anyone have any thoughts or experience with either working
    around the problem (it would seem to be a pity to have to have a setting
    per client), or whether in fact this proxy server is being too draconian
    in its interpretation.
    Thanks in advance,
    Gary
    Refs:
    RFC2616
    http://www.web-cache.com/Writings/Internet-Drafts/draft-luotonen-web-proxy-tunneling-01.txt

    Pardon my ignorance about proxies, but how do you tell the plug-in that there is a proxy in between you and the destination?
    The reason I ask is because with the https protocol, the first thing that happens is that an SSL connection is set up between the endpoints, and only after, through this secure tunnel, is the GET request or whatever sent. The proxy never gets to see any of the HTTP headers.

  • AE is too heavy and how make it 'light'

    hello guuysssss!
    im working right now and im a some clip with a bunch of layers and each layer has a large size. im mad because everytime i tried to preview my clip it takes many times because is so heavy. how do i make this stuff more light for preview? what are the settings? just when im doing my work. and when it finished, just turn back all those settings so my clip not getting worse as im work with.. like maya. when we modeling, maya is so light for modeling. eventough we bulid many polygons. but when rendering, it takes so many times. im want to do the same way as maya in after effect. can i possible to do that?
    my computer specs:
    Macintosh 10.7 (a.k.a Lion)
    Intel core i3 3.06ghz
    4GB of RAM DDR3

    Samuel,
    See this page for information about memory and improving performance in After Effects.
    See this page for resources about making After Effects (and Premiere Pro) work faster.
    Regarding your specific question about proxies, see this video.
    As stated, 4GB is a terribly small amount of RAM for using After Effects. You say that you don't know how to add more RAM, but know that this is going to be a limitation in having After Effects work as smoothly as you may like. You'll need to pay special attention to the various techniques for improving performance to minimize the amount of RAM needed.

  • How to listen to itunes radio at work?

    Hi, can someone please help?!
    I love listening to itunes radio but when I am at work for some reason it does not work.
    I tried to research the subject but most of the posts are specific to a different problem or just mention something about proxies, but don't give detailed instructions.
    I figure the problem is proxies since I am connected a network server and I have all the information and passwords needed, but I do not know how to fix this or where to fix this on my computer. The proxies that i have checked right now are the "web proxy" and "secure web proxy". i tried to turn both off and that didn't really seem to work either.
    Please let me know what to do, and if that is not the problem please tell me what the problem is and how to fix it.
    Thank You
    m.

    Before you spend a lot of time spinning your wheels on this issue, I'd suggest you first talk to your company's IT department and ask if they're blocking access to streaming music sites. Many organizations do to prevent music streaming from hogging all their bandwidth.
    If they tell you they're not blocking or throttling access, post back and we'll go from there.
    Regards.

Maybe you are looking for

  • How can I re-activate my CS3 with connectivity issue?

    I received a new MacbookPro for Xmas , migrated successfully but need to "re-activate" my CS3. when i open the app I get the activation screen but when i click "over internet", it attempts then gives me an "Activation-No Connection" screen that loops

  • EMAIL ATTACHMENTS - file too large

    I tried emailing a catalog that's in a PDF format. It's file size is 12.29mg. I got a message that the file size was to large to send. Message stated that I needed to remove images so that file was than 10.0mg or that I could sign up for Windows Live

  • Exchange 2013 cached mode and Exchange 2010

    Hi, We have issues with Outlook 2013 not getting new emails in inbox unless its restarted. It works fine when cache is turned off. The users are on same LAN as single Exchange 2010 backend server. Any ideas please? Celtic

  • Does anyone have a disc / installation file of Adobe CS4 and may make it available / sell?

    Does anyone have a disc / installation file of Adobe Photoshop CS4 and may make it available or sell? I bought a group license in 2009, I've got serial number and certificate but unfortunately I've lost the cd. Now I have to re-install the applicatio

  • Motion tracking is not working for videos but works for images?

    Motion tracking is not working for videos but works for images. When the videos is drop onto the tracking object the videos corner don't appear highlighted. I am working on windows 7 with version 13.1.