Exposed IP Address

We recently migrated from Windows Server 2003 to 2008 R2. We have a 2 server clustered configuration in our production (PRD) and our acceptance testing (SAT) environments. Our PRD environment is exposing the internal server name randomly.
This is a classic ASP site that is used on our intranet.
For example, the site link is called 'http://intra.ourorg/oursite'. The servers are named Web01 and Web02. Normally the address displayed when on the contact page would be 'http://intra.ourorg/oursite/contact.asp'. But randomly the
address is displayed as 'http://web01.ourorg/oursite/contact.asp' or 'http://web02.ourorg/oursite/contact.asp'. There is no distinguishable pattern.
This does not happen in the SAT environment. I can take the same path in both environments and get the error in PRD but not in SAT. We have verified that the code is exactly the same in both environments.
Our server team is researching but has not come up with what's causing the issue.
Any guidance on what to look for or compare between the environments would be appreciated.
Thank you,
Mark

Hi Mark,
Due to this question is more related to IIS, to get better help, please post your question on the IIS forum.
Here is the address,
http://forums.iis.net/
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

How to send a mail without exposing my address?

Hi. Can I hide my email address? Thanks : )

I can only think of one reason to do that. Sending spam, or other things that I personally wouldn't want to do. I don't think I wish to help you in this respect.

My address book randomly "disappears" behind my compose window. Just started happening. How do I fix or reload firefox?

While in the "compose" page of my email account with Cox.net I have the following problem. When I click on the "To" icon, my address book appears and functions properly for a short time, then mysteriously disappears behind the "compose" window. I have to minimize the "compose" window in order to expose the address book window and complete my selection of recipients. This is a new problem that occurred in the last two days. Can you help me correct this issue?

Exactly what Shootist007 states - take it in for service or replacement - could be a simple software issue or it could be a hardware issue...
Don't even bother messing with it.....Might screw up even more.....
Make sure your files are backed up in case they give you a replacement....
Good luck - hope you get it sorted out...

Linker error using extern with 2 libs

Hi,
I have written two libraries, both libraries need to share access to a variable, GblVal. So in one lib, when GblVal is changed, the other lib should also see this change.
I have tried to achieve this through extern in the following setup:
lib1:
lib1.c:
int GblSum;
void Do(){
GblSum=1;
lib1.h:
extern int GblSum;
lib2.c:
#include "lib1.h"
void check(){
printf("%d",GblSum);
finally I have a main process that has both compiled libs
main.c:
Do();
check();
obviously my code doesn't actually do the above, but this is just the gist of what I'm trying to do. I'm fairly certain that I am setting my extern variable up right, however I can't compile lib2 due to:
Undefined symbol "_GblNum" referenced in lib2.c
what am I doing wrong? I have suspicions that this is a linker error but I'm not really sure how to fix it.
thanks

Static libraries (usual file extension .lib) are simply collections of compiled object files. To use functions and data contained in a static library in an application, the library must be specified as one of the input files to the application. At link time, the linker searches the library to resolve unsatisfied function and data references and extracts the object modules required to satisfy them.
Dynamic Link Libraries (usual file extension .dll) are compiled and linked code modules (that is, they contain their own run-time support) that expose the addresses of particular functions (and, less often, data items) contained within the module. If an application uses functions from a dynamic link library, the DLL is also loaded when the application is run and the function/data addresses made known to the application. DLLs are most often used to share common code between applications, but because they are self-contained they are also a common way of building applications using different technologies (e.g. a CVI application can use a DLL built using Delphi or VC++).
Normally, a DLL is associated with an import library which is linked in with the calling application. This import library resolves references to functions and data in the DLL used by the calling application by 'telling' the application which DLL the functions are in and how to find them in that DLL. Applications can also explicitly load DLLs at run-time if required.
Martin
Certified CVI Developer

Render:resourceUrl Tag exposing Producer IP address

I have an image yellow1.gif inside ProducerApp running on WLP 10.3.2. When I expose my portlet over WSRP, I use
<render:resourceUrl contextualpath="/resources/images/yellow1.gif"/> which renders the URL as follows on the ConsumerApp. The image renders right on consumer side.
http://localhost:7001/ConsumerApp/resource/cs__pageLabel%3Dtest_portal_page_2%26_portlet.portalUrl%3D%252FConsumerApp%252Ftest.portal%26_st%3D%26_windowLabel%3DhelloWorld_1_1/u_/id_/rr_true/po_false/rs_/rc_/iu_http%3A%2F%2F123.45.67.87%3A7001%2FProducerAPP/*wsrp*separator/resources/images/yellow1.gif
Functiality wise the URL rewriting is fine. But in security terms, it is not good to expose the Producer IP (Please note last 20-30 chars in above URL..U see the producer IP i.e123.45.67.87) that is appering the rendered URL. Is there a way to encryt the URL or any other mechanism to not expose the producer IP?
Thanks in advance.

Hello,
There are a few ways you could hide the producer IP address:
1) On the consumer machine, define a name for the producer in the consumer machine's OS hostname resolution table and use that instead. For example, in Linux you can put an entry for the producer's IP address in /etc/hosts and give it a name like "producer.sample"-- it doesn't even have to be a "normal" DNS name since it is handled only on the consumer machine.
2) If your portlet is a JSR286 portlet, you could just make it a portlet-served resource; I believe the producer address information is not encoded directly into those resource URLs.
3) You could write a WSRP interceptor on the consumer to look for and re-write those URLs, then a resource proxy interceptor (also on the consumer) to take your altered URLs and change them back into something the resource proxy servlet can pin back to the appropriate producer.
Kevin

Can you encrypt RRM packets (so that WLC IP address is exposed to all)

Hi Guys,
As RRM packets include the WLC controllers IP address in the payload of the packet (can decode the hex). Is there a way to encryp this so that my freindly wireless neighbors do NOT see the address of my WLCs as explained in this document for OTAP?
http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a008093d74a.shtml
And in this document http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a008072c759.shtml
APs periodically send out Neighbor Messages, sharing information about themselves, their controllers, and their RF Group Name. These neighbor messages can then be authenticated by other APs sharing the same RF Group Name.
Would MFP help in this situation?????
Many thx
Ken

Thanks Jerome,
We have disabled OTAP as we dont need the feature, but we cant disable RRM otherwise DCA and TPC would not work in the case of an AP failure to correct coverage holes.
So the fact that RRM discloses information like Controller IP addresses and RF group names to the public domain is still (I feel) a bit of a non essential risk?
Could the RRM neighbor packets either not include such information, (would probably have to include the RF group name, but why the controller IP address) or encrypt these packets with the MFP MIC?
I am going to test the Infrastructure MFP this weekend and then perform another RF packet capture to see if the RRM packets between established APs are able to be captured and readable, but if you or anyone else have a definite anwser to MFP encrypting RRM packets that would be good mate :))
All the best and thx for the response my freind :)
Ken

Address Book and Expose

I use my add book a lot during the day as it's setup for my business. In 10.5 when I had any app open and would use Expose and select my add book the "search field" would always be highlighted and I could then automatically begin typing the name I want. I have noticed in 10.6 that the cursor is just flashing at the end of the name in search field and then I have to delete the name and then begin typing the name of who I'm looking for. Does this happen to everyone else? Wish Apple would put it back like it was...

To reset your Dock to default you can go to your Finder "Go" menu choose "Go to Folder" and enter ~/Library/Preferences.
Then delete these files and restart or log out and back in.
com.apple.dock.plist
com.apple.dock.db
com.apple.dock.extra.plist

Web mail log in is preserving an email address w/ exposed password. How can this be fixed?

when logging into web mail, I mistakenly entered my email password while still in the address box. Now, whenever I begin to enter my email address, the complete address shows up (cool) and underneath that is the "alternative" address which includes my password (uncool). I have gone to Tools and cleared cache and cookies to no avail. How can this be cleared?

Remove saved Password(s): [http://kb.mozillazine.org/Menu_differences Firefox > Preferences] > Security: Passwords: "Saved Passwords" > "Show Passwords"
See also:
* http://kb.mozillazine.org/Deleting_autocomplete_entries

How to configure SharePoint HNSC with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.

Could you please let me know how SharePoint HNSC can be configured with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.
In normal path based site collections/web applications, reverse proxy configuration can be done using alternate access mappings with Public URL = "proxy URL", internal = "HNSC Share Point URL" so that share point sends response back
to Public URL = "proxy URL".
In Host Named Site Collections, alternate access mappings are not supported. Each HNSC is designed to have only one URL in each zone. Zone is one of the five zones(Default,Intranet,Internet,Custom,Extranet) with each of which only one alternate
URL is associated. This is what we are able to get using power shell command "Set-SPSiteUrl", but this will not help us to get the response back to proxy URL after a request sent to share point because we could not find any mechanism in share
point HNSC to respond to a different URL(proxy URL). Consequently, Share Point URLs are exposed to external users.
Below share point article in MSDN blog is symmetrical to what we are observing with Share Point 2013 and Proxy Server. It mentions that internal HNSC URLs can’t be hidden using any proxy server. If hiding the internal Share Point URLS is a requirement,
it suggests to use a web application instead of host named site collections.
Though I’m also observing the same behavior with Share Point 2013 HNSC, Could you please confirm my understanding is correct.
http://blogs.msdn.com/b/kaevans/archive/2012/03/27/what-every-sharepoint-admin-needs-to-know-about-host-named-site-collections.aspx
Excerpt from above article-
"Host Named Site Collections Only Use One Host Name
Continuing on the discussion on AAMs and host named site collections, you cannot use multiple host names to address a site collection in SharePoint 2010. Because host-named site collections have a single URL, they do not support alternate access mappings and
are always considered to be in the Default zone. This is important if you are using a reverse proxy to provide access to external users. Products like Unified Access Gateway 2010 allow external users to authenticate to your gateway and access a site
as http://uag.sharepoint.com and forward the call to http://portal.sharepoint.com. Remember that URL rewriting is not permitted. Further, a site collection can only respond to one host name. This means if you are using a reverse proxy, it must forward the
calls to the same URL. If your networking team has a policy against exposing internal URLs externally, you must instead use web applications and extend the web application using an alternate access mapping."<u5:p></u5:p>

Hi Satish,
You are right that only one URL is allowed for each zone of the host-name site collections in both SharePoint 2010 and SharePoint 2013.
It is by design that each host-name site collection only support one URL for each zone.
The article below is about RTM version of SharePoint, and it is the same for SharePoint 2013 with the latest CU.
https://support.microsoft.com/en-us/kb/2826457
So to make the URL of HNSC not exposed to external users is not supported, you need to use path-based sites instead.
Best regards.
Thanks
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Web Service - Expose BI data

Hi,
We are in BI 7, trying to expose BI data using QUERY_VIEW_DATA.
I did basic configurations using Tcode - SICF.
In WSADMIN, when I execute
" Web Service QUERY_VIEW_DATA default_host/sap/bc/srt/rfc/sap/ QUERY_VIEW_DATA " getting following error message:
"You are not authorized to view the requested resource"
Also verified with basis team the J2EE server address, They confirmed my configuration values correct in Tcode - WSADMIN (goto--> Administration Settings), Soap runtime version is - v1.00_final_6.40
Is there any basic documents available to verify existing configuration.., also what are the Authorization objects required to perform this.
Appreciate, if any documents or solution provided to over come above issue.
Thanks,
Madhu

Hi Arun,
Thanks for Information. After Adding WSNavigatorRole, previous error is not coming.
Now there is new error : Cannot download WSDL from http://...servername.com:port/sap/bc/srt/rfc/sap/QUERY_VIEW_DATA?sap-client=020&wsdl=1.1: It is not allowed to access this service. If you believe you should be able to, please contact your system administrator .
If we call the above URL directly, you will be able to access the file.
What might be the issue...
Thanks in advance,
Madhu

DNS pointing to both internal and external addresses

I am currently going through the very helpful lynda.com OS X Server 10.5 videos to set up an Advanced Server from the ground up.
DNS was set up first and for the most part everything has gone for me just like Sean shows in the movies.
Our company's domain name is automaticduck.com so I have been setting up DNS records for our internal network to some of the machines, for example the Xserve I'm configuring is called duckxserve.automaticduck.com and it points to the proper internal IP address. I set up my MacBook Pro OS X Client system to use the new DNS server on duckxserve and while it works for getting around the internal network now I'm having problems connecting to outside addresses on our domain such as www.automaticduck.com and support.automaticduck.com. If I remove the internal Xserve from my client's DNS servers list I am able to get out again.
I thought I would be smart and add A NAME records to my internal DNS server with the external IP addresses, however this didn't change anything, I still couldn't get out to them.
We are NOT hosting our own web site and email etc., we have DNS set up through our web host with A NAME, C NAME and MX records for various servers that are exposed to the outside world.
My intention based on my understanding was that with the setup of this internal Xserve running DNS it would simply serve DNS records to the internal network. How can my set up my internal DNS to it does not conflict with my ability to get out to our outside public addresses?
Message was edited by: Wes Plate

Antonio Rocco wrote:
Add your ISP DNS Addresses to the forwarders section and that should be it.
Thank you for the reply, Tony.
If I set up the forwarders section* can I just not include information about our automaticduck.com servers that are not on our internal network? It seems to me (not that I know anything about this) that if our internal DNS server does not know about www.automaticduck.com or support.automaticduck.com then requests for those addresses should get passed on to our ISP's name servers*, right?
*68.238.128.12, 68.238.64.12
This doesn't work like I thought it would.
I have my client set up to use my new internal DNS server's IP address for a DNS server and I am able to get to the local machines defined therein (like http://wesworkg5/ ), however I cannot get to my outside sites... www.automaticduck.com or support.automaticduck.com (I can't even get to discussions.apple.com for some reason).
I can get to other outside sites that I've never been to before (so I know they have to get looked up), like whitehouse.gov or harvard.edu or almondjoy.com
The DNS log doesn't show me anything, maybe it isn't supposed to in a case like this.
Whatcha think? Thank you so much.

Consuming Orchestration Exposed WCF service On remote system.

Hello All , I am new to BizTalk, so bear with me
I have created an orchestration for Insert operation to DB and Exposed it as WCF service, finally deployed in IIS fine.
but whenever I am trying browse wsdl of service its prompting as : Network Error (dns_unresolved_hostname)
Your requested host "DomainName" could not be resolved by DNS.
url : http://domainName/Biztalk_PaymentTransaction_Process_PaymentTransaction_Port_RcvTransaction.svc?singleWsdl .
I just replaced that domainName and put IP there I am able to browse my service, worked fine on Local system.
but while trying with same url replacing domainname with
IP on remote system, its throwing Exception as below
There was no endpoint listening at http://DomainName/Biztalk_PaymentTransaction_Process_PaymentTransaction_Port_RcvTransaction.svc
that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
please Explain what I need to do to resolve this,
Do I'm missing something or what extra I need to DO...
Thanks to all.

Associate the domain name and the IP of the server where the service is hosted in the host file.
Goto the server where the service is hosted.
Goto the server’s host file in %SystemRoot%\system32\drivers\etc\hosts
Take a backup of the host file before you edit it.
Add the following entry as the last line in the host file, replacing in it with the actual IP Domain name.
xxx.xxx.xxx.xxx YourdomainName.com
where xxx.xxx.xxx.xxx = IP and YourdomainName.com = domain name
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

Posting to PartnerLink with No Exposed WSDL?

I have a web service that I am posting to that hosts it directly on a url like this .... http://server:81/. There is no exposed ?WSDL address. When I put this URL with port in the location in my config file I get an error when I try to post to it. For other partner link config file locations you put the full path to the WSDL files.
<summary>oracle.fabric.common.FabricException: Cannot read WSDL "{http://www.upslogisticstech.com/UPSLT/TransportationSuite/TransportationWebService}TransportationWebService" from Metadata Manager.: WSDLException: faultCode=INVALID_WSDL: Invalid XML in document at: http://server:81/, line: {1}, column: {2}: oracle.xml.parser.v2.XMLParseException: End tag does not match start tag 'br'.</summary>
<reference name="XXXX">

<binding type="ws">
<attribute name="port">
<replace>http://www.upslogisticstech.com/UPSLT/TransportationSuite/TransportationWebService#wsdl.endpoint(TransportationWebService/TransportationWebService)</replace>
</attribute>
<attribute name="location">
<replace> http://server:81/</replace>
</attribute>
<property name="weblogic.wsee.wsat.transaction.flowOption">
<replace>WSDLDriven</replace>
</property>
</binding>
</reference>
When I created the partnerlink I have the unexposed WSDL when I create it. I just referenced a local wsdl file in the project. I can import this WSDL in soapUI and post directly to the port ok. How do I configure this in my partner link? I don't want the location to expect a WSDL file.

Hello,
What you try to do is certainly possible. When I look at your config plan, replacing the port name looks suspect to me. Is that port name the same as the port name in your local wsdl file?
I would try to make it work without using a config plan first. So modify the location in the composite.xml and try if that works. After that you can go on and create a config plan to replace the location.
Greetings,
Wilco

Getting an error while exposing as grid service

hii everyone,
I need to expose kmeans algortihm as a grid service as part of my project. I attached java source code of kmeans algorithm and its wsdl file. I am getting the following error while building and deploying my Kmeansgrid project. It seems there is an error in my wsdl file. I couldnt figure it out. Please help me. Thank you.
processing WSDL in main3.wsdl
[java] ERROR: Couldn't find main3PortType porttype.
[java] [main] ERROR wsdl.WSDLPreprocessor - ERROR: Couldn't find main3PortType porttype.
[java] java.lang.Exception: PortType not found: main3PortType
[java] at org.globus.wsrf.tools.wsdl.TypesProcessor.getPortType(TypesProcessor.java:476)
[java] at org.globus.wsrf.tools.wsdl.WSDLPreprocessor.main(WSDLPreprocessor.java:192)
BUILD FAILED
C:\eclipse\workspace1\KmenasGrid\buildservice.xml:11: The following error occurred while executing this line:
C:\eclipse\GTK\etc\build.xml:228: The following error occurred while executing this line:
C:\eclipse\GTK\share\globus_wsrf_tools\build-stubs.xml:160: Java returned: 1
And My WSDL file is given below:
<?xml version="1.0" encoding="UTF-8"?>
<wsdl:definitions targetNamespace="http://cluster.algorithm.c4s.org" xmlns:apachesoap="http://xml.apache.org/xml-soap" xmlns:impl="http://cluster.algorithm.c4s.org" xmlns:intf="http://cluster.algorithm.c4s.org" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:wsdlsoap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:xsd="http://www.w3.org/2001/XMLSchema">

<wsdl:types>
<schema elementFormDefault="qualified" targetNamespace="http://cluster.algorithm.c4s.org" xmlns="http://www.w3.org/2001/XMLSchema">
<element name="clustering">
<complexType>
<sequence>
<element name="i" type="xsd:int"/>
<element name="j" type="xsd:int"/>
<element name="s11" type="xsd:string"/>
<element name="i1" type="xsd:int"/>
<element name="j1" type="xsd:int"/>
<element name="s12" type="xsd:string"/>
<element name="i2" type="xsd:int"/>
<element name="j2" type="xsd:int"/>
<element name="s13" type="xsd:string"/>
</sequence>
</complexType>
</element>
<element name="clusteringResponse">
<complexType>
<sequence>
<element name="clusteringReturn" type="xsd:string"/>
</sequence>
</complexType>
</element>
</schema>
</wsdl:types>
<wsdl:message name="clusteringRequest">
<wsdl:part element="impl:clustering" name="parameters"/>
</wsdl:message>
<wsdl:message name="clusteringResponse">
<wsdl:part element="impl:clusteringResponse" name="parameters"/>
</wsdl:message>
<wsdl:portType name="main3">
<wsdl:operation name="clustering">
<wsdl:input message="impl:clusteringRequest" name="clusteringRequest"/>
<wsdl:output message="impl:clusteringResponse" name="clusteringResponse"/>
</wsdl:operation>
</wsdl:portType>
<wsdl:binding name="main3SoapBinding" type="impl:main3">
<wsdlsoap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
<wsdl:operation name="clustering">
<wsdlsoap:operation soapAction=""/>
<wsdl:input name="clusteringRequest">
<wsdlsoap:body use="literal"/>
</wsdl:input>
<wsdl:output name="clusteringResponse">
<wsdlsoap:body use="literal"/>
</wsdl:output>
</wsdl:operation>
</wsdl:binding>
<wsdl:service name="main3Service">
<wsdl:port binding="impl:main3SoapBinding" name="main3">
<wsdlsoap:address location="http://localhost:8080/kmeans/services/main3"/>
</wsdl:port>
</wsdl:service>
</wsdl:definitions>

I have sorted out the issue. I didnt provide the access of document service to authenticated user. For this i have changed in following way.
1. Go to group space then click on actions menu.
Manager-->All Settings-->Security-->Roles tab set up various security level to Moderator, Participants & Spaces-User i.e. authenticated user.
Regards,
SEWSupport

Biztalk schema exposing as WCF service with multiple operations

Hi,
I am working on a design pattern to expose the BizTalk schema as a WCF service and thought of taking expert’s advice. I have a single schema with 30 different nodes and each one is a different message type. For this 30 message types we need to expose WCF
endpoints to customer for consuming from their application.
When I exposed this schema as WCF service, a single receive location got created in BizTalk application and in IIS there is one .svc file. I defined 30 operations for this while exposing the endpoint with wizard.
Currently I came up with the below 2 approaches but I did not like them as there is more redundancy
Create 30 different orchestrations and each orchestration subscribes to Message Box direct binding with message type as filter.
Create a single orchestration that binds to single receive location( this location got created by wizard..) and access the operation/message type in the expression shape. Based on this value create 30 IF conditions for each message type. For this the
single orchestration receive shape should have a message type of xml document and then access the type. Is it possible?
I don’t like the above approaches as it is very difficult to maintain and also difficult to add for any new message type.
Does anyone has good ideas for doing this?
Thanks
JB

"Canonical Schemas" are used where multiple source messages need to be addressed by a SINGLE Operation !!!
Every operation anyway translates to a separate process. Forget that we're dealing with BizTalk for a minute, when you're writing plain we services, you introduce new service contracts (operations) when you deal with different data contracts. To come back,
in BizTalk your data contracts are your schemas. So when you have multiple schemas, each requiring different processing then you need different orchestrations.
Let us for a minute assume you've defined a single service schema (very possible with a service header and a service details where the service data contract could differ). Now you use this schema to expose ONE service endpoint (good till now). In that service
you're suggesting to ADD decisions (something like a switch statement where you'll do 'x' set of activities is the message is of 'x' type and so on... How is this sustainable? Every time you introduce an new operation, you'll have to tear down and redeploy
the new orchestration which will affect all other operations. During the introduction of ONE op you may touch other parts of the orchestration (multiple branches in a parallel shape anyways make the orchestration very unwieldy from a code management/support
standpoint) and introduce errors in existing ops.
Regards.

Exposed IP Address

Similar Messages

Maybe you are looking for