Jdbc and fire walls (reverse proxy)

Can jdbc use reverse proxy to get through the corporate firewall? This is to provide access to other companies outside the corporate firewall. How?
Are there any other secure ways of providing jdbc thru the firewall?

Only a type 3 driver that can use port 80 or 443. In addition the driver needs to wrap the data in HTTP to get thru the firewall. These ports are about the only guaranteed to be open.
This is why a type 4 will not work since the middleware is required to pull off the HTTP wrappers.
See JDataConnect at www.j-netdirect.com
null

Similar Messages

Shoud the fire vault and fire wall be turned on iam a new imac user

should the fire vault and fire wall be turned on. iam new to apple this is my first i mac

John Potts wrote:
Is the router's hardware firewall equally effective if one is connected wirelessly (as opposed to via an Ethernet cable)?
IMHO, yes.
also, if your network is protected as mentioned above, it would take a very determined hacker with lots of time to hack into it.
additionally, make sure you password protect your base station(s).

Problems with apex and anychart (using reverse proxy)

Hi,
Im using 2 Servers. The first with Apache2 and the /i/ directory and the second with a Oracle XE Database.
The imagedirectory is at the first server.
Heres my Apache Setup:
<Location /apex>
Options None
Order allow,deny
allow from all
ProxyPass http://..(remote_ip)..:8080/apex
ProxyPassReverse http://..(remote_ip)..:8080/apex
</Location>
Alias /i/ /var/i/
<Directory "/var/i/">
Options None
AllowOverride None
Order allow,deny
Allow from all
</Directory>
if I open a page with a anychart chart I get this error:
"Flash Security Error
Anychart can not be launched due to Flash Security Settings violation.
Please refer to Security error Article in Anychart Documentation..."
http://www.anychart.com/products/anychart/docs/users-guide/index.html?security-error.html
I think I have to place a crossdomain.xml
Placing the crossdomain.xml in example.com/ root-directory doesn't work?
thanks for any help

Hi Christoph,
Yes, the APEX Listener works with Oracle XE. The APEX Listener is currently an Early Adopters release, and is available for download from here: http://www.oracle.com/technology/products/database/application_express/html/apex_listener_download.html. I would recommend reviewing the accompanying Installation Guide before proceeding. There's an 'APEX Listener Feedback' thread - APEX Listener Feedback - which may also proof useful to you. There's also another related thread on this topic: Re: #HOST# Substituin incorrect for charts via Reverse Proxy which discusses the replacement of the #HOST# substitution string.
Regards,
Hilary

Need in depth knowledge about Certficate request and install for Reverse proxy and CAS role

Hi,
I have few confusions about Exchange 2010/13 certificate request and install. As per my understanding best practise is to assign public CA certificate to Reverse proxy and Local CA certificate to CAS servers but need to know that what should be the format
of certificate request? Do we need to order public certificate just for mail.domain.com and add SAN for other web services URLs and is it required to add CAS array and server names to this certificate ? In what case we will add server names and what will happen
if we don't add in it ? How the outlook clients connecting from internet will be using this certificate? I have very limited knowledge in certificates and it always pisses me off. Please help me with explanations and articles. I tried to google and gone through
many articles but didn't get a fair idea. Thanks in advacnce. :)

Hi,
Here are my answers you can refer to:
1. Use the New-ExchangeCertificate cmdlet to generate a new certificate request:
New-Exchangecertificate -domainname mail.domain.com, autodiscover.domain.com -generaterequest:$true -keysize 1024 -path "c:\Certificates\xxxx.req” -privatekeyexportable:$true –subjectname "c=US o=domain.com, CN=server.domain.com"
2. CAS array name doesn’t need to be added in the certificate:
http://blogs.technet.com/b/exchange/archive/2012/03/23/demystifying-the-cas-array-object-part-1.aspx
3. It depends on the situation that you configured to add the server name.
4. Outlook clients use certificate for authentication.
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Absolute and relative addressing (Reverse Proxy)

Hi,
we want to use a Reverse Proxy Envirement with EP 6 SP15.
Are the standard links (e.g. navigation) from EP working with relative adressing?
sample:
Real address:
http://www.myserver.com/myapp/mypage.jsp
address on reverse proxy:
http://www.otherserver.com/some/other/url/help/index.jsp
Want to link to the origin page
http://www.myserver.com/myapp/help/index.jsp (origin)
over
http://www.otherserver.com/some/other/url/help/index.jsp
This means behind a reverse-proxy I have to address the page as follows:
../mypage.jsp
Got anyone experience with this envirement - and is it working?
Regards
Thomas
Message was edited by: Thomas Schilling

Hi Thomas,
I guess you will be using Apache as your Reverse Proxy?
Configure your Apache something like this:
My httpd.conf file looks like this:
<VirtualHost IPAddress:80>
Redirect / https://server.domain/
</VirtualHost>
I then have a ssl.conf file that looks like this:
<VirtualHost IPAddress:443>
***Lots of other entries***
ProxyPass /irj/ https://virtualhost/irj/
ProxyPassReverse /irj/ https://virtualhost/irj/
ProxyPass / https://virtualhost/
ProxyPass /webdynpro/ https://virtualhost/webdynpro/
</VirtualHost>
Now obviously edit these ProxyPass, and ProxyPassReverse to suit your needs.
This should help.
Regards
Ian

Sun Web Server Reverse Proxy and Weblogic HTTP to HTTPS redirection

Hi,
I am currently testing reverse-proxy from SJSW 7.0 update 5 to Weblogic server but I have encountered an issue.
I have configured a context root to be forwarded to weblogic:
Web Server: www.server.com
URI: /path
Reverse Proxy URL: wlserver:9000
When I access https://www.server.com/path, I am getting the correct page. The issue is, the weblogic server is configured to redirect HTTP access to HTTPS, i.e., when I access http://www.server.com/path, it should be redirected to https://www.server.com/path. However, that is not the case. What happens is that I am being redirected instead to https://www.server.com/.
If I don't use reverse proxy, that is, if I use the libproxy.so from weblogic, I get the correct redirection.
Would appreciate it very much if someone can help me troubleshoot this issue.
Thanks in advance!
Edited by: agent_orange on Jul 29, 2010 2:30 AM
Edited by: agent_orange on Jul 29, 2010 2:31 AM

I am not sure, how you have configured your reverse proxy since you didn't attach / refer your current configuration file. this is how I would do it..
- create a new configuration (using web server 7 admin gui , within configuration wizard, disable java option if you plan to use web server 7 only for reverse proxy)
- select this new configuration and go to reverse proxy and try to reverse proxy / to the origin server.
that is all it should need.
your obj.conf or <hostname>-obj.conf depending on your configuration should look like following snippet
<Object name="default">
AuthTrans..
NameTrans fn=map from="/" to="/path" name="reverse-proxy-/"
</object>
<Object name="reverse-proxy-/">
Route fn=....
Service ..
</Object>
this is all you should need..
However, if you wanted to add complexity to your configuration, you could do some thing like
<Object name="default">
Auth..
<If defined $security>
NameTrans fn=map from="/" to="/path" name="reverse-proxy-/"
</If>
</Object>
<Object name="reverse-proxy-/">
Route...
</Object>

Solution: iPad/iPhone Login issues with IIS as Reverse Proxy (Android and Windows Phone works)

Hi,
I had issues with iPad/iPhone access from external and tried a lot. Now I found my solution I like to share.
I setup a IIS on Windows Server 2012 with ARR 2.5 and Android and Windows Phone could login but not iPad and iPhone.
The IIS Log on the reverse proxy showed:
2013-02-26 12:03:31 <IP> POST /webticket/webticketservice.svc X-ARR-CACHE-HIT=0&X-ARR-LOG-ID=1996c8d7-09d0-4310-8da4-a8dfb7940e28 443 - <ClientIP> Lync%202010/1.6+CFNetwork/609+Darwin/13.0.0 - 401 0 0 124
2013-02-26 12:03:31 <IP> POST /webticket/webticketservice.svc X-ARR-CACHE-HIT=0 443 - <ClientIP> Lync%202010/1.6+CFNetwork/609+Darwin/13.0.0 - 502 3 12018 93
First Request gets a 401 while anonymous. Second try would be with authentication but it never reached the internal front end server.
After I installed a fix for ARR
http://forums.iis.net/t/1195560.aspx/1?ARR+502+3+Bad+Gateway+0x80072ef2+2147954418+The+supplied+handle+is+the+wrong+type+for+the+requested+operation the Apple Devices could login.

Hi,
This resolved our problem too!! So happy after 2 weeks of messing around with just about every setting recommended from all types of forums and rebuilding our reverse proxy I was at a loose end.
Our environment is Lync 2013 Enterprise, Lync 2013 Edge, IIS as Reverse Proxy on Server 2012 using ARR 2.5
We had Android and Windows clients working but no iOS devices at all. In the iOS log we were seeing
<h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>502 - Web server received an invalid response while acting as a gateway or proxy server.</h2> <h3>There is a problem with the page you are looking for, and it cannot be displayed. When the Web server (while acting as a gateway or proxy) contacted the upstream content server, it received an invalid response from the content server.</h3> </fieldset></div></div></body></html>
When the client was trying to retrieve from the webticketservice.svc
2013-04-11 17:19:44.659 Lync[4970:6c61000] INFO TRANSPORT TransportUtilityFunctions.cpp/907:<ReceivedResponse>
POST https://lyncwebext.contoso.com/webticket/webticketservice.svc
Request Id: 0x72cfc18
HttpHeader:Content-Length 1477
HttpHeader:Content-Type text/html
HttpHeader:Date Thu, 11 Apr 2013 16:22:25 GMT
HttpHeader:Server Microsoft-IIS/8.0
HttpHeader:StatusCode 502
Installed the HotFix from here:-
Hotfix for Microsoft Application Request Routing Version 2.5 for IIS7 (KB 2732764) (x64)
Rebooted the Reverse Proxy and iOS clients worked straight away for both Lync 2010 and Lync 2013 on both iPhone 5 and iPad both.
I hope this helps others as I was losing the plot :-)
Cheers
Sam

Omniportlet and reverse proxy

I have an Oracle Portal installation behind a reverse proxy with Portal on 1 server, SSO/OID on another server, and the database on a 3rd server.
Portal works fine, but Omniportlet and Webclipping are using the server name and port for the Portal server and not the reverse proxy URL. The Portal server name and port are, of course, not accessible to users.
There is no proxy between the Portal and the database.

Originally Posted by ghuertae
Hi.. I have one server with one IP internal 10.x.x.x with reverse proxy to one ip public 159.x.x.x why ?? because we need that server can be used for public and internal users.
For example user external had a server 200.x.x.x and they need connect to my server 159.x.x.x to diferente ports like 8020, 8000 and the port 22 (ssh)
With the port 8000 and 8020 no problem they can connect.. but with 22 port
I did the next filter in my border manager 3.8 (novell 6.0)
Src Interface : ALL
Dest Interface : ALL
Packet Type: ssh (default 22)
Src Port: ALL
Protocol: TCP
Dest Port: 22
Src Add Type: Host
Src IP Add: 200.X.X.X
Dest Add Type: Host
Dest IP Add: 159.X.X.X
and
Src Interface : ALL
Dest Interface : ALL
Packet Type: ssh2 (default 22)
Src Port: 22
Protocol: TCP
Dest Port: ALL
Src Add Type: Host
Src IP Add: 159.X.X.X
Dest Add Type: Host
Dest IP Add: 200.X.X.X
In the server BorderManager setup "Aceleration -> Http Aceleration" I put WeB server port 22 / Named IP Address ip internal and in Proxy IP Addr the ip Public.
If i did a Tel 159.X.X.X 22 I can connect, but if use a program putty �
ssh 159.X.X.X commad i can not connect..!!!
Is there an error in my filter? o is there something else that i have to do ?
thanks a lot.
ok the solution that i find is... use the reverse proxy and Nat for the same ip and it works fine.
I can access to ssh without problem..!

SJSWS7 Reverse Proxy and SharePoint

Hi,
Is it possible to reverse proxy a SharePoint/WSS application through SJSWS7 Reverse Proxy?
Are there any issues in doing so? How do we take care the NTLM authentication?
Any pointers greatly appreciated.
Thanks,
Esselle
Note: Apologies if this had been already answered in this forum. I tried to run a search but did not find any topics.

Yes, share point can be the origin server and I don't think there is any specific setting that needs to be done within reverse proxy for this. Just treat this as regular origin server and follow our reverse proxy docs or blogs and that is all I believe it should take.
However, we do not (yet) support NTLM authentication in reverse proxy mode . However, we do support Kerberos within web server 7 and that hopefully should allow u to authenticate in the web server 7 land. however,
I have filed a bug to track this issue (reverse proxy + NTLM authentication)
- Sriram

Problem with Apache reverse proxy after applying SP13 NW

Hello,
we have a NW04 EP Portal and a Apache reverse proxy in the DMZ. After applying SP 13 for the portal we get the following error from the reverse proxy:
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /irj/.
Reason: Error reading from remote server
Apache/2.0.52 (Win32) mod_ssl/2.0.52 OpenSSL/0.9.7e Server at servername.company.de Port 443
Is is it possible, that there is a problem with sp13?
Best regards
Daniel Holstein

Hi Daniel,
ok I`ll try to find a solution in parallel and keep you up to date.
In the following my settings in case I missed something:
<VirtualHost test.firma.de:443>
SSLEngine on
SSLProxyEngine on
SSLCertificateFile /apache/keys/pac_ssl_qep_dmz_server.crt
SSLCertificateKeyFile /apache/keys/pac_ssl_qep_dmz_server.key
ServerName test.firma.de:443
ServerAdmin [email protected]
LogLevel debug
ErrorLog logs/ssl_443_error
CustomLog logs/ssl_443_access_log common
ProxyVia Off
ProxyPreserveHost On
ReWriteEngine on
ReWriteLogLevel 0
ReWriteLog logs//ssl_443_rewrite_http.log
ProxyPass / https://backend.firma.de:50001/
ProxyPassReverse / https://backend.firma.de:50001/
</VirtualHost>
Regards, Jens

Disabling normal proxy function in a reverse-proxy server..

If you want to disable the capability to use the server as a "normal" forward proxy and only allow reverse proxying. Based on a section in the admin manual
These additional automatic mappings are for users who connect to the reverse
proxy as a normal server. The first mapping is to catch users connecting to the
reverse proxy as a regular proxy. Depending on the setup, usually the second is the
only one required, but it does not cause problems in the proxy to have them both.
The first mapping reffered to is a mapping rule:
"http://external.ip.address" => "http://proxyied.server.ip"
The second is of the form:
"/" => "http://proxyied.server.ip"
Would it be enough to just have the "/" rule, which it kind of sounds like i the admin text?

You can use the admin GUI to turn on access control and to create/modify
ACLs. Once you save and apply changes, and compare the new obj.conf
to the previous one (do a backup first, if you prefer) you can see a new
PathCheck "check-acl" directive present. You need to wrap this directive
in a <Client> tag:
Here's how to use <Client> tags:
http://docs.sun.com/app/docs/doc/819-5494/6n7isltea?l=ko&a=view

RDS 2012 - Using a reverse proxy with the Gateway server on the internal LAN

Hi there,
I'm looking to introduce an RDS 2012 farm and would like to put the RDS Gateway server on the internal LAN (due to it's AD requirements etc).
What are the best practise options for using a reverse proxy to forward traffic to the gateway server and is it better to do this than just forward 443 traffic from the DMZ through to the Gateway directly?
Thanks,
Paul.

Hi Paul,
It is generally considered more secure to have a reverse proxy in front of RDG. I don't know of a proxy that will handle the RDG UDP traffic, so you will need to consider using direct server return for that or not having the benefit of UDP. Whether
or not it is acceptable to simply forward TCP 443/UDP 3391 directly to your internal RDG is up to your security policies. Many companies are fine with it while many other companies think it is unacceptable and require a reverse proxy or other method
to provide an extra layer of protection.
-TP

Windows vista system, continuously trying to download a DRM file in Adobe Digital Editions application shows "Error check activation". I have authorized the Fire Wall and still the same.

windows vista system, continuously trying to download a DRM file in Adobe Digital Editions application shows "Error check activation". I have authorized the Fire Wall and still the same.

Since Re-activation as suggested by the link above is not working for you, Can you please confirm the following:
The OperatorURL is reachable. ( you can find the operatorURL from the acsm file by opening it in notepad,etc)
And Book is still available on the book-store for purchase.
(If any of first two are not available, you might have to talk to distributor for next action item to get the book. Since you will have record of purchasing the book, (in my opinion) they should provide you the new token for downloading the book)
And please confirm this that you used the same userID for downloading that you used when you first fulfilled/downloaded the book.
(If it is the case, then you have to use the correct userID)
I hope it helps.

Reverse Proxy and Load Balancer for SMP 2.3 and Agentry Application

Hi Expert,
I'm putting in place a mobile solution composed by SMP 2.3 SPS 4 and SAP ECC 6.0. In the SMP 2.3 I created the agentry server and I have deployed my agentry application.
My SMP/Agentry infrastructure is composed by two servers therefore I need a load balancer for balance the load into the several servers. Furthermore I need to use a reverse proxy in my DMZ zone.
Based on what indicated in the SAP note "1904213 - SAP Mobile Platform Server Release Information" the Apache Reverse Proxy is not supported for Agentry clients. Agentry uses nginx for Reverse Proxy.
I also found the following document How-to-Guide for Reverse Proxy and Load Balancing in SAP Mobile Platform 3.x that explain how to set-up a reverse proxy and load balancer with nginx and apache.
Both the SAP note and the HOW to document are refereed to SMP 3.0 and not to SMP 2.3.
I would know if the NGINX must be used also for SMP 2.3.
Any suggestion/information is appreciated.
Thanks in advance
g.

Please see Agentry Network Landscapes

Hi my itunes crashes everytime i try to excess the itunes store,it seems to work fine until that point,ive uninstalled and reinstalled itunes and also tried it with my fire wall off but all to no avail any help would be greatly appreciated

hi my itunes crashes everytime i try to excess the itunes store,it seems to work fine until that point,ive uninstalled and reinstalled itunes and also tried it with my fire wall off but all to no avail. i am using a new computer which isnt authorized yet if that makes any difference. any help would be greatly appreciated

Windows 8 or Windows RT? iTunes won't run on Windows RT. It should run on Windows 8. Use the appropriate installer from an account with administrator privileges.
Windows System Requirements
PC with a 1GHz Intel or AMD processor and 512MB of RAM
Windows XP Service Pack 2 or later, 32-bit editions of Windows Vista, Windows 7, or Windows 8
64-bit editions of Windows Vista, Windows 7, or Windows 8 require the iTunes 64-bit installer
400MB of available disk space
Broadband Internet connection to use the iTunes Store
tt2

Jdbc and fire walls (reverse proxy)

Similar Messages

Maybe you are looking for