Installing a Proxy server?
Ok.
I have come a bit further then last time.
I have managed to get both my internal mailserver and my external mail gateway up and running. They are talking together and mail is flowing as intended.
On the mail gateway in the DMZ local delivery is turned off.
On the internal mail server I now have IMAP running and I'm using Squirrel mail for web based mail.
Web mail is delivered from the internal gateway address through NAT.
I'm running the external web service on the mail gateway in the DMZ.
I'm running internal webservices on the internal server.
VPN connects directly to the internal router.
Wireless services connect directly to the internal network
I have bought a second router to put between the ISP and my DMZ. Once I have installed this router I will start to restrict the flow of information.
Now I would like to take a look at how to set up a proxy server.
I know what it is for, and where to put it but I don't know how to configure such a device.
Could you please point me to some reading material on this issue?
Perhaps something of similar quality as the documentation on postfix.org.
TIA
Hans
Just wondering...
Should I be asking this question on another forum?
If so, on which forum?
Hans
Similar Messages
-
Problem in installing Directory Proxy server
Hi all! Recently downloaded the trial version of sun one directory proxy server. After installing the sun one DS 5.2 . I tried to install sun one proxy server..when it asks for configuration server information i have given the admin id and password ....
but it gave me following error message
"The given Administrator Id/password combination was not accepted by the
Configuration Directory Server.
The Sun ONE configuration directory administrator is the ID typically used to
log in to the console."
I did used the same id and password to login to console & i am able to log in.
Please advice.Two quick hints.
First off, instead of hitting <Enter> to accept the default for the username [admin], type "admin" (without the quotes) as if you were giving different credentials. There's a known issue during the installation where the default text doesn't work.
Additionally, I had to change my admin password in the configuration directory to cleartext in order to get it to work. For some reason the password encryption during the bind was never successful. To do that:
dn: uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot
changetype: modify
replace: userPassword
userPassword: {CLEAR}password
I have no idea if this addresses the problem itself or just a symptom, but it did allow me to install DPS. You might want to give it a shot. -
Unable to make SSL connection from Proxy Server to Directory Server
I have recently installed Directory Proxy Server 5.2 Patch 3 on Solaris 9 server. Backend directories are Sun Directory Server 5.2sp3 using Thawte signed certificates.
I can't get the Proxy Server to make a successful SSL connection to the Directory Servers. The proxy server can make the non-ssl connection without problem. When the Proxy Server attempts the SSL connection it gives SEC_ERROR_UNTRUSTED_ISSUER error. The SSL certificates on the Directory Servers are signed by Thawte and have just recently been updated. The certificate for the Proxy Server is also signed by Thawte. The CA certificate is loaded in both the Proxy Server and the Directory Server.
I also have an iPlanet Directory Access Router (iDAR) 5.0 Server that is our current production server that serves these same directories and I haven't had a problem with SSL connection with it. So, the certificates are good.
I've encluded an exerpt from the Proxy Server log below for one of SSL connection attempts.
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [STAT/CONN] [ 560
307] Connection from secured listen port. New connection is on socket 37.
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [STAT/CONN] [ 560
305] Number of open connections is 1.
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [STAT/CONN] [ 171
211] [client( 152.3.100.30, 37)] Accepting connection via dukenet-group
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 302
023] Failure with CERT_VerifyCertNow (checking signature, usage: "certUsageSSLSe
rver").
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 302
023] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
729] Rejected certificate on socket 38
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
729] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
728] Certificate rejected on socket 38
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
728] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
721] Read on socket 38 failed.
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
721] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 301
006] Unexpected error on socket 38. (Error: -8172).
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 171
002] [client( 152.3.100.30, 37)] [server( 152.3.101.110+ 636, 38)] L
ost connection to server, trying to failover to another
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 302
023] Failure with CERT_VerifyCertNow (checking signature, usage: "certUsageSSLSe
rver").
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 302
023] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
729] Rejected certificate on socket 38
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
729] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
728] Certificate rejected on socket 38
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
728] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 385
717] ber_flush unexpected error on socket 38
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 385
717] SEC_ERROR_BASE + 20, NSPR error: -8172 (0xffffe014). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 385
717] ber_flush unexpected error on socket 38
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 385
717] NSPR error: -5938 (0xffffe8ce). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
721] Read on socket 38 failed.
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 385
721] NSPR error: -5938 (0xffffe8ce). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 301
006] Unexpected error on socket 38. (Error: -5938).
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [NOTICE] [ 171
002] [client( 152.3.100.30, 37)] [server( 152.3.232.3+ 636, 38)] L
ost connection to server, trying to failover to another
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 385
717] ber_flush unexpected error on socket 38
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 385
717] NSPR error: -5938 (0xffffe8ce). Native errno is: 11
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [EXCEPTION] [ 190
102] [client( 152.3.100.30, 37)] Rejecting request The server is tempor
arily busy
Aug 30 2005 16:12:12 king.oit.duke.edu SunONEDPS[ 17471]: [OP/CONN] [ 170
904] [client( 152.3.100.30, 37)] [server( 152.3.101.110+ 636, 38)] C
onnection unbound by clientNo, that was on 5.1. For 6.0, my classpath has just:
%JAVA_HOME%\lib\tools.jar;%WL_HOME%\lib\weblogic_sp.jar;%WL_HOME%\lib\weblogic.jar;
%CLASSPATH%
This works fine. -
I have installed JES proxy server and created network group ,load balancing properties and other reqd.properties to manager two consumer directories.
In order to test the set up i am using ldapsearch utility to search for an user.I am binding it to proxy for the search assuming that it will take the request and forward it to one of consumers.When i run the ldapsearch query ,am getting insufficient access error and the log files do not show up anything.Any help is greatly appreciated.
Thanks in advanceSocket socket = new Socket(httpProxyServer, proxyPort);
boolean isConnected = socket.isConnected();At this point 'isConnected' can only be true. Contrary to widespread misperception, it will then remain true forever, even after you close the socket.
This code checks whether the proxy server and port are valid. If ivalid, it throws either UnknownHost or ConnectionTimeout Exception. There is no such exception as ConnectionTimeoutException in the JDK. It is mostly likely to throw ConnectException, with either 'connection refused' or 'connection timed out'.
But how I do validate the other 2 inputs - Http proxy user and password? I will not have any URL here to make a URLConnection using the proxy.
The validation has to be done just with 4 inputs - proxy server, prot, user and password.In that case it can't be done. Just connecting directly to the proxy only proves that it is listening. You can only get it to ask for authentication by getting it to do something, i.e. fetch a URL.
See also java.net.Proxy. -
Compatibility ADFS 2.0 with ADFS 2.1 proxy server
Hi,
I'll install an ADFS proxy server to support an internal ADFS (Server 2008 R2) environment.
Because of the huge differences between ADFS on Server 2008 R2 and 2012 R2, I'll install the proxy server it on a 2012 server (not R2).
Are there any known things to take in mind when using a config like this?
My preferred option would be to use 2008 R2 too for proxy, but it's quite EOL.I am not 100% sure what you are doing. But let me be extremely explicit: Use a proxy of the same OS and ADFS version as the ADFS server. Make sure they have the same patches etc. Do not mix the versions.
There are too many subtle differences (if the mix works at all). If you don't want to use 2012R2 then use both ADFS and its proxy on 2012.
Paul Lemmers -
Successfully Installing & Activating CS6 (not Creative Cloud) behind an Authentication Proxy server
If you are like me and work in a fairly secure office where all Internet access is routed through an authenticate proxy server (you have to use an ID and password to get to the Internet) you might have noticed that installing CS6 products can be difficult.
The installer told me to go to http://www.adobe.com/go/getactivated for an offline activation.
It is not practical to "Disable the firewall" or"Disable the proxy" as most of us worker bees have neither the authority or ability to do such a thing.
So back to that last bit: "Disable the proxy server." Well I could not do that, but I could disable my PC's ability to connect to the proxy and therefore make it seem like I had no Internet whatsoever. And lo and behold all the right prompts appeared and offline activation sailed along smoothly!
This is a little long, but I wanted to include lots of screen shots so you'll know what to expect.
Here's how I did it:
1. Right-click the Internet Explorer Icon on your desktop (or select Tools > Internet Options in IE)
2. Click Properties.
3. Select the Connections card.
4. Click LAN Settings.
5. Uncheck any boxes (you might want to write down what was in the boxes or grab a screen shot as you'll have to put this back to how you found it later to restore your Internet access). Click OK and OK again. You've now shut off IE's ability to hit your proxy server and therefore the Internet.
6. Click Install I have a serial number
7. Accept the license agreement.
8. Enter your license key.
9. Click Next. At this point the installer will attempt to validate your license, but since you haven't got Internet access, it will give you an error. This is where the process broke down on me, when the installer could detect the Internet but not navigate my proxy.
10. But, now beacuse you do not have Internet Access, you'll get this error. Click Connect Later.
11. Select your customizations (if any) and click Install.
12. When installation is complete, click Launch Now.
13. You'll get an error since you don't have Internet, click "Having Trouble Connecting to the internet?"
14. Click Offline Activation.
15. Click Generate Request Code.
16. Go to http://www.adobe.com/go/getactivated, sign in, put in your request code and serial number and generate the response code.*
17. Enter the response code.
18. Click Activate.
19. Click Launch when you get the Offline Activation Complete dialog.
* if you are installing more than one product, generate the response codes for each at the same time. I ran into an issue where once I created a response code, no other response codes I created for subsequent installs were accepted. I had to wait 24 hours for a newly generated code to work.
You are done! Enjoy your software!
Cheers!
-GregJust want to point out--after many hours of attempting to activate CS6 software (stumping two Adobe techs in the process)--that there is one important bit of information left out of the directions given above (and it's not in the video either):
These instructions work only if you are starting the installation from scratch. If you (mistakenly) think that your inability to connect to Adobe's activation server is temporary and go ahead and install the software, you will not be able to get back to the screen to generate a request code (which you need to be able to activate the application). This is in spite of Adobe's assurance to the contrary that if you don't activate during installation, you can do it later when the application starts. If you try to activate later, you are taken to an online screen that asks for the "request code"--but you have not been given an opportunity to get that request code.
The only solution I could find: I had to uninstall Photoshop CS6, then unplug my internet connection, then reinstall the software, watching carefully for the screen that provides the button to generate a request code. If Adobe is going to require the activation/validation procedure, then it really needs to make it work and correct the error in the software, namely, the failure to provide for offline activation once the software has been installed. -
I have a proxy server and the server is allowing me to go to iTunes. But I get a message "Error in accessing iTunes store. Please try again later." Error code ox80092013. I cannot find that code in the troubleshooting section. I have just installed a new PC HP5750, with Norton IS 2013. I installed the current version of iTunes directly from the iTunes site. My proxy server is American Family Online web browsing filter. I contacted them and they said there should not be a problem with their server. I have had an account previously, but has been inactive for several months. I even tried to create a new account, but still got the same error code.
Someone please help with this. I have accompaniment tracks on iTunes that I need for music ministry.Hi Lcoffin8,
Thanks for visiting Apple Support Communities.
See this article for additional information and steps that can help:
Can't connect to the iTunes Store
http://support.apple.com/kb/ts1368
Regards,
Jeremy -
Any version of Firefox above 3.5.4 I try to install will not let me get to the internet. Each Firefox gets upgraded it keeps giving me the error message that "Firefox is configured to use a proxy server that is refusing connections." Then I need to re-install 3.5.4 to get to the internet. This is driving me nuts! How do I fix this?
You're welcome
-
Hi guys (and girls)!
Hear me up. The idea is like this:
A friend of mine has currently Exchange 2010 SP3 in his environment with Forefront Protection installed on it. As we all know Forefront Protection is discontinued in Exchange 2013 environment because Exchange 2013 on-premisses is using integrated tool for
doing that, but a friend of mine would really like to stick with Forefront Protection because it is "much better tool" then integrated stuff in 2013.
Ok, so here's the idea. Exchange 2010 SP3 with Forefront is installed on Phisical machine (so, not virtualized) on 2008 r2 std OS. We decided to move to Exchange 2013 because we wanted to achieve DAG on Exchange 2010 but we realized that is not possible
because 2008 R2 STD OS does not support failover-clustering functionality, but you are able to achieve that on newer OS for example 2012? Ok, so we bought another server, where we are planing to install Vmware Esxi and put two virtual machines on it.
One Will be 2012 r2 STD OS with Exchange 2013 on it, the other Will be 2008 r2 STD with Exchange 2010 Edge role + Forefront on it. We are planing to move Exchange 2010 production server to virtual machine Exchange 2013, and newly virtual machine
with Exchange 2010 edge server will only be "a kind of Proxy server with Forefront functionality". What concers me?
Should we install Exchange 2010 edge transport 1st, or Exchange 2013? I think I have read somewhere after you put Exchange 2013 in production you are "unable" to install any previous Exchange versions is that true?
One more question about what happens after you install another Exchange 2010 with Edge role in production enviroment? Does installation effects a production enviroment, let's say we do just a clean installation of Exchange + ran updates?
Which roles do you need to install on Exchange 2010 to achive Edge role? Do you need to have all the roles install for having Edge server (mailbox, hub,cas?).
bostjancShould we install Exchange 2010 edge transport 1st, or Exchange 2013? I think I have read somewhere after you put Exchange 2013 in production you are "unable" to install any previous Exchange versions is that true?
already answered by PS CL above
One more question about what happens after you install another Exchange 2010 with Edge role in production enviroment? Does installation effects a production enviroment, let's say we do just a clean installation of Exchange + ran updates?
No it does not as long you don't make any changes on send/receive connector and do the EdgeSubscription. As soon as you do the Edge subscription there will be send/receive connector created, so pay attention how to setup the Edge Server.
Which roles do you need to install on Exchange 2010 to achive Edge role? Do you need to have all the roles install for having Edge server (mailbox, hub,cas?).
Just install the Edge Transport Server and make sure you install ADLDS services.
as you have mentioned you are doing to install both Mailbox and Edge server on the same VMware - it is a single point of failure.
Where Technology Meets Talent -
I have been very satisfied with Mozilla Firefox until recently. I have Firefox 3.6.3. Every time a box appears with "installing updates" it installs updates then the screen goes to "problem loading page" and "the proxy server is refusing connections". The only way I can get internet access is to go to "control panel" then "add or remove programs" then I have to "uninstall mozilla firefox 3.6.13. Then I click on my "Firefox Setup 3.6.3, and I install that version. Once I do that, everything works fine again. It is such a headache because I can't prevent the "installing updates" from happening and once it happens, it does not work, as described above.
Any thoughts???????
Russ Carlson ''moderator removed email address and cellphone number''I have this problem also.
Can't bring up the Hotmail screen.
I am looking for a simple way to
get rid of 3.6.13.
I tried restoring to a point
before the Dec 10 upgrade but when system
restored Firefox was still 3.6.13
I guess I will have to abandon MOZILLA FIREFOX
and start using MICROSOFT IE -
Microsoft outlook 2010 not working after installing proxy server and ForeFront TMG firewall
I am trying to have Outlook 2010 work though proxy server recently installed on internal network, I have configured IE to use the proxy settings, but I cannot find the
same with Outlook 2010, I want to clarify that we use Outlook 2010 to connect to internet email and we installed ForeFront TMG firewall on the proxy server and as a result of that we changed the IP settings and after that Outlook stopped sending and receiving
mails and gives error: “receiving reported error (0x800408fc): 'The Server name you entered cannot be found (it might be down temporarily).”
So please help us by sharing how to fix this issue to make Outlook work though proxy server
ThanksHi,
Are you using Exchange account? If you are changing your Exchange account to use a proxy server, I suggest we can create new profile and automatically re-configuring your account with autodiscover service to have a try:
http://support.microsoft.com/kb/829918
If the account can’t be configured automatically, please manually configure the account and change the settings for procy server:
1. In the Account Settings dialog box, click the
Email tab, click to select the Exchange account, and then click
Change.
2. Click More Settings. On the Connections tab, click
Exchange Proxy Settings.
3. In Connection settings, type the proxy server FQDN under Use this URL to connect to my proxy server for Exchange, click OK to have a try, and then click
OK to save all settings.
4. Restart Outlook.
Regards,
Winnie Liang
TechNet Community Support -
Getting Authenticate Proxy Server questions when Installing Flash Player?
Hello all
I am getting the menu below when trying to install Flash Player. This is an old proxy server that I have not used for 3 years. I cannot find anyplace on my computer where this is still referenced. How do I get around this menu and install the Flash Player? Where do I look to find where the installer is pulling this information? None of my browsers are set up to use a proxy server, so I am stumped. I do not use a proxy server and Flash Player will not install without this specific server information. HELP.
Thanks,
Prowler61Hi Prowler61,
Please refer : http://helpx.adobe.com/flash-player/kb/installation-problems-flash-player-windows.html -
Installing Sunone Directory Proxy server
Hi all! I am in the process of installing sunone directory proxy server. also in the same machine i have directory server and administration server.
For some reason directory poxy installation fails at the end.
look at the log file all i can see is
Admin Server refused to disclose its pid!
can any one had this experience or share some thoughts.
ThanksI'm Using standalone DPS installer. Here is what i see in installation log
[5] stdout> executing dps52cfgUninstall::main
[5] stdout> Retry for: /admin-serv/tasks/Operation/Restart?op=getpid
[5] stdout> Retry for: /admin-serv/tasks/Operation/Restart?op=getpid
[5] stdout> Retry for: /admin-serv/tasks/Operation/Restart?op=getpid
[5] stdout> Retry for: /admin-serv/tasks/Operation/Restart?op=getpid
[5] stdout> Retry for: /admin-serv/tasks/Operation/Restart?op=getpid
[5] stdout> Retry for: /admin-serv/tasks/Operation/Restart?op=getpid -
Proxy server in Install Creative Cloud
I have users who have limited proxy.
Which website should I enable to install Photoshop Creative Cloud?Hi Santiago,
Please check the following Proxy server addresses with Port numbers:
https://na1mbls.licenses.adobe.com
https://ims-na1.adobelogin.com
https://adobeid-na1.services.adobe.com
https://na1r.services.adobe.com
http://activate.adobe.com
https://activate.adobe.com
http://adobe.activate.com
https://adobe.activate.com
ccmdls.adobe.com:443
ims-na1.adobelogin.com:443
na1r.services.adobe.com:443
prod-rel-ffc-ccm.oobesaas.adobe.com:443
lm.licenses.adobe.com:443
www-du1.adobe.com
ccmdl.adobe.com:80
swupmf.adobe.com:80
swupdl.adobe.com:80
Thanks!
Ankit -
Flash Player will not install: Asks for authentication of a proxy server.
Trying to install Flash Player. The installer asks for confirmation of a proxy server: American Family Online. This is a third party content filter that I used over 3 years ago, but no longer use. I cannot authenticate, since I do not use this service anymore. this prevents me from installing Flash Player. I cannot find a reference to this in browser settings or security settings and do not currently use a proxy server. What do I need to do to get past this and install Flash Player?
Thanks,
Prowler61Could you check the progress of the install.
(1) Physical file location
The DLL is deposited in this folder:
C:\Windows\SysWOW64\Macromed\Flash
Can you find NPSWF32_11_9_900_170.dll there?
(2) Registry entry
If the file exists, the next link in the chain is the registry entry Adobe leaves for Firefox to find.
If you are comfortable using RegEdit, that should be here:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer
Maybe you are looking for
-
How to tell record amount in Cube or DSO in GB
All, I me trying to figure out how to see data amount in cubes and DSOs in GB. I appreciate any help. Regards, Mike
-
i am trying to connect to my friend's wifi, i have a very strong signal indicated on my ipad, but cannot connect to the internet. Yesterday i connected without any problem, can anybody tell me why i cannot connect today?
-
10.5.6 update and coreaudio timestamping crashes?
anybody else experiencing this? i'm having numerous audio application problems since the 10.5.6 update. Reaktor 5 crashes on launch. Many Max/MSP objects crash the app as soon as the audio engine is turned on. any ideas on what happened to coreaudio?
-
To run a program in BACKGROUND using SUBMIT
I need to run a program in background using the SUBMIT option. Here i have to pass an internal table form one program to another which will be used to update sales orders using BDC. Questions 1} Can we execute a program in background using SUBMIT? 2}
-
Adobe Acrobat Pro X and Mac issues
I am running Adobe Acrobat X Pro on Lion and when I go to scan from PDF, my HP Deskjet 3052 A scanner isn't showing up in the drop down menu. I also have Acrobat Pro X for Windows on my machine (VMWare) and it works fine, but it won't work with the