Need help w/ wierd problem maybe caused by RMI/sockets

Hi.
I'm having a potential problem at a customer site which
has me completely baffled and with which I could do with
some help.
I've written and deployed at the customer site an Client/
Server application, developed using RMI. The problem occurs
on the server side.
I've implemented my own SocketFactory and am restricting
the sockets to ports 8091 and 8091 - through the SocketFactory
and through the constructor of java.rmi.server.UnicastRemoteObject.
The server is waiting for incoming commections. The DGC
regularly does maintenance and garbage collection, triggering
my SocketFactory. Server machine is Windows 2000. The server
machine has local server ports 8090 and 8091 in LISTENING
state (on 0.0.0.0:8090 and 0.0.0.0:8091).
The server, machine A, is waiting for incoming connections from
the client application, on machine B, which is not running. On the
same network segment are machines C, D and E (all Linux machines),
on which NONE of my software is running, and which should have
NOTHING to do with my system. These machines are communicating
amongst themselves, but not with machine A.
The customer claims (I'm not on-site, so I can't check), that
after a random time of running my server application 24/7 (the
first time after about a week, the second time after only 3 hours),
machines C, D and E were no longer able to exchange data. As soon
as my server application on machine A is aborted, systems C,
D and E are again able to exchange data - immediately.
What I don't understand is:
How is it possible, that an RMI server application, which
has opened sockets, accept()s them, has the open sockets
in LISTENING state, but is not actively sending data,
IN ANY WAY influences the traffic on the rest of the subnet?
Do opened Sockets in the accept() state send ANY form of
traffic over the network?
Is there any way I can influence other machines on the
network, simply by opening a bunch of inbound sockets? To
the best of my understanding of networks and TCP/IP there
should be no way to do that. Or am I wrong?
Again, I'd appreciate any help or pointer or even wild
theory related to this problem.
Thanks,
Daniel

For starters, why don't you try changing the ports you are using?

Similar Messages

Need help with daq problem

Hi,
I need to generate a clock with a period of 20 micro seconds, duty cycle of
approx 20% and a data line as well as an address line all linked to the clock
pulse.
I have tried many different solutions, all using the Daq PCI-1200 but nothing
seems to work correctly. Usually the system bombs and I have to do a manual
reset to over come the problem.
Any suggestions?
Ken

Hallo, Ken,
Du meintest am 20.02.00 zum Thema Need help with daq problem:
> I need to generate a clock with a period of 20 micro seconds, duty
> cycle of approx 20% and a data line as well as an address line all
> linked to the clock pulse.
You'll need an external clock, expecially under Windows.
Windows ticks with appr. 18 Hz, and the CPU tick isn't always available
when Windows tasks multi.
Viele Gruesse!
Helmut

When trying to install Aid Virtual Instruments I get a warning no mountable file systems. I need help fixing the problem.

When trying to install Pro Tools 10.3.3 Aid Virtual Instruments I get a warning no mountable file systems. I need help fixing the problem.

Thanks Linc for responding to my post. I searched a little further and found I was missing a file. Once I downloaded the fix, I was able to install the software from the original download.

Need help with getResource() problem under weblogic 6.1

Hey all,
          I've got a serious problem that I can't figure out. This should be really
          simple - but it's alluding me. I have an ear file with a number of servlets
          inside it. This ear file also contains a resource that my servlets want to
          read from. This resource is located (within the ear file) at:
          "/content/structure/a.txt". The file contains raw ascii.
          To have my serlvet read from this file, I thought it would be as simple as:
          URL content =
          servlet.getServletContext().getResource("/content/structure/a.txt");
          // pw is an instance of PrintWriter
          pw.print(content.getContent());
          However, when I execute the above I get the following exception:
          java.lang.NullPointerException
          at
          java.net.URLConnection.stripOffParameters(URLConnection.java:1011)
          at java.net.URLConnection.getContentHandler(URLConnection.java:979)
          at java.net.URLConnection.getContent(URLConnection.java:581)
          OK, so fine - I figure that I'm new to this. The documentation for the URL
          class tells me there is another way around this. It says that rather then
          calling getContent() directly, I can open a stream on the URL and read from
          that, like so:
          URL content =
          servlet.getServletContext().getResource("/content/structure/scenario2resourc
          es.txt");
          FileInputStream fis = content.openStream();
          but when I do this I get the following different exception:
          java.lang.ClassCastException: weblogic.utils.zip.SafeZipFileInputStream^M
          at Utility.writeFileToOutput(Utility.java:134)^M
          Apparently this thing is trying to return a web-logic-specific stream (which
          is incompatible with an FileInputStream) - which I don't want to use or
          learn about since I want my stuff to work under other webservers.
          Can anyone tell me what I'm doing wrong? This should be simple.
          -john
          John Hilgedick
          WisdomTools, Inc.
          [email protected]


Wenjin,
          I appreciate your response. I tried treating it as a normal InputStream -
          but it didn't make any difference. Here's what I did:
          URL content =
          servlet.getServletContext().getResource("/content/structure/scenario2resourc
          es.txt");
          InputStream is = (InputStream)content.getContent();
          And here's the exception:
          java.lang.NullPointerException^M
          at
          java.net.URLConnection.stripOffParameters(URLConnection.java:1011)^M
          at
          java.net.URLConnection.getContentHandler(URLConnection.java:979)^M
          at java.net.URLConnection.getContent(URLConnection.java:554)^M
          at java.net.URL.getContent(URL.java:807)^M
          at Utility.writeFileToOutput(Utility.java:134)^M
          You can see that it is definitely breaking somewhere in getContent().
          If you have any other ideas, I'd appreciate hearing about them.
          -john
          ----- Original Message -----
          From: "Wenjin Zhang" <[email protected]>
          Newsgroups: weblogic.developer.interest.servlet
          Sent: Wednesday, November 20, 2002 5:03 PM
          Subject: Re: Need help with getResource() problem under weblogic 6.1
          >
          > The "/" in getServletContext().getResource("/content/structure/a.txt")
          means the
          > web (WAR) application root, not your EAR root.
          >
          > The ClassCastException is because that content.openStream() is not
          FileInputStream
          > and has nothing to do with Weblogic. You should treat it as normal
          InputStream.
          >
          >
          > "John Hilgedick" <[email protected]> wrote:
          > >Hey all,
          > >
          > >I've got a serious problem that I can't figure out. This should be
          really
          > >simple - but it's alluding me. I have an ear file with a number of
          servlets
          > >inside it. This ear file also contains a resource that my servlets want
          > >to
          > >read from. This resource is located (within the ear file) at:
          > >"/content/structure/a.txt". The file contains raw ascii.
          > >
          > >To have my serlvet read from this file, I thought it would be as simple
          > >as:
          > >
          > >URL content =
          > >servlet.getServletContext().getResource("/content/structure/a.txt");
          > >// pw is an instance of PrintWriter
          > >pw.print(content.getContent());
          > >
          > >However, when I execute the above I get the following exception:
          > >
          > >java.lang.NullPointerException
          > > at
          > >java.net.URLConnection.stripOffParameters(URLConnection.java:1011)
          > > at
          java.net.URLConnection.getContentHandler(URLConnection.java:979)
          > > at java.net.URLConnection.getContent(URLConnection.java:581)
          > >
          > >OK, so fine - I figure that I'm new to this. The documentation for the
          > >URL
          > >class tells me there is another way around this. It says that rather
          > >then
          > >calling getContent() directly, I can open a stream on the URL and read
          > >from
          > >that, like so:
          > >
          > >URL content =
          >
          >servlet.getServletContext().getResource("/content/structure/scenario2resour
          c
          > >es.txt");
          > >FileInputStream fis = content.openStream();
          > >
          > >but when I do this I get the following different exception:
          > >
          > >java.lang.ClassCastException: weblogic.utils.zip.SafeZipFileInputStream^M
          > > at Utility.writeFileToOutput(Utility.java:134)^M
          > >
          > >Apparently this thing is trying to return a web-logic-specific stream
          > >(which
          > >is incompatible with an FileInputStream) - which I don't want to use
          > >or
          > >learn about since I want my stuff to work under other webservers.
          > >
          > >Can anyone tell me what I'm doing wrong? This should be simple.
          > >
          > >-john
          > >
          > >
          > >--
          > >John Hilgedick
          > >WisdomTools, Inc.
          > >[email protected]
          > >
          > >
          >

I try signing into iMessage and it takes about 45-50 seconds to do. When that happens it tells me there is a network problem. I am positive I don't have a network problem and I need help on this problem please??

I try to sign in and it just takes forever to do I try and try and do it over and over and it brings me the same results. Created a new Apple ID and when I did it still tells me there is a network problem. But the thing is I am still able to use the Internet I need help?? And it does the exact same thing for FaceTime so I don't know what to do??

Error -3259 is a network timeout error, usually. This article might help:
http://support.apple.com/kb/TS2799

Need Help! Wierd loading percentage issue does not work in IE but in other browsers it is ok, why?

Hi!
I have created a little test swf for my client and I have
encountered a wierd problem because the loading percentage text
field does not seem to function in IE 6 but the same file works
fine when viewed in Firefox and Netscape. When I test the movie
using simulate download in Flash it works well too. Is this a bug
and how can be fixed?
Please take a look online:
http://www.attila.reinhardt.com/clients/accentcom/clientprofiles_cheyney.html
I have also posted the related actionscript code below.
Thank you for any help in advance,
Attila

<< I Tried to post it through this link -
http://input.mozilla.com/en-US/feedback#sad
There was no visual clue that it took the feedback - just sat on the screen with my information in the text box. >>
The same thing happens with me.

I NEED HELP WITH SYNC PROBLEM!

I have already posted about this once and got no help! I can not afford Apple's greedy fee for helping us with a product we paid a lot for
My iPad will not sync with iTunes anymore!
The error I get is: The iPad "Jonnathon's iPad" cannot be synced. An error occurred while reading from the device.
Sometimes the error is different saying it cant find a required disk.
It always occurs just after downloading apps that had been purchased or updated since the last sync.
I have made sure my iTunes is up to date and the iPad does have the latest version of it's OS.
I did do a "Run Diagnostics" and did both "Device connectivity tests" and "Device sync tests" and no problems were found. But I still get the errors!

This is wiered.You better call the Apple and say your problem.Maybe they could help you.Or maybe your iPad has a virus.If you think it has a virus , you have to restore it.

Need Help with Scrolling Problem

I have a JTree displayed in scrollpane. Based on search criterial I select the nodes where the search criteria is found. If the match is located off the screen further down into the tree, the node is highlighted but the scrollpane doesn't automatically scroll down to show it. Any help with this problem is appreciated.

Wow.. Thanks. I thought I would need some fancy code to handle this problem. scrollPathToVisible did it for me. Thanks.

Need help bad, screen problem

heres my problem. i setup arch on my desktop last night (64bit), i installed my nvidia drivers. i have a 21" crt sun monitor, not sure the model number. but i brought it to a friends this morning to update and install kdemod since they have highspeed. now i was hooked up to their monitor, they have a cheap 15" crt. so it worked fine there, now when i got it home, i get a black screen when it boots up on my monitor, i can get to a console however
i deleted a couple lines in the monitor section in the xorg.conf............so now i get 640x480 res, but i cant use anything higher
been searching around, and i found some stuff about running Xorg -configure, but i get something about a tmp file being locked..........and i dont know how to delete anything here from the console
i need help here
Last edited by ssl6 (2007-09-16 07:00:40)

nvm, i just deleted the xorg.conf and rebooted, its fine now
edit// nvm, its not using my nvidia driver.........i might still need help, im trying something right now, not sure what im doing though
ok, i tried to run nvidia-xconfig, and when i rebooted, im back to square one with my monitor flashin an invalid scan frequency
well, i deleted the xorg.conf again and got it booted up. but i generated a new one with nvidia-xconfig again, heres what i puts out, i just need to remember not to reboot any time soon. im using a 7900gs, the newest nvidia 100 series drive from the repo, and arch 64bit on this system by the way
# nvidia-xconfig: X configuration file generated by nvidia-xconfig
# nvidia-xconfig: version 1.0 (buildmeister@builder26) Wed Jun 13 16:54:14 PDT 2007
Section "ServerLayout"
Identifier "Layout0"
Screen 0 "Screen0" 0 0
InputDevice "Keyboard0" "CoreKeyboard"
InputDevice "Mouse0" "CorePointer"
EndSection
Section "Files"
RgbPath "/usr/lib/X11/rgb"
EndSection
Section "Module"
Load "dbe"
Load "extmod"
Load "type1"
Load "freetype"
Load "glx"
EndSection
Section "InputDevice"
# generated from default
Identifier "Mouse0"
Driver "mouse"
Option "Protocol" "auto"
Option "Device" "/dev/psaux"
Option "Emulate3Buttons" "no"
Option "ZAxisMapping" "4 5"
EndSection
Section "InputDevice"
# generated from default
Identifier "Keyboard0"
Driver "kbd"
EndSection
Section "Monitor"
Identifier "Monitor0"
VendorName "Unknown"
ModelName "Unknown"
HorizSync 30.0 - 110.0
VertRefresh 50.0 - 150.0
Option "DPMS"
EndSection
Section "Device"
Identifier "Device0"
Driver "nvidia"
VendorName "NVIDIA Corporation"
EndSection
Section "Screen"
Identifier "Screen0"
Device "Device0"
Monitor "Monitor0"
DefaultDepth 24
SubSection "Display"
Depth 24
Modes "1600x1200" "1280x1024" "1024x768" "800x600" "640x480"
EndSubSection
EndSection
here's that part of the xorg.conf from my other computer running 32bit arch with a geforce 3 connected to the same monitor via kvm switch. this machine is using a 96xx driver though
Section "Monitor"
# HorizSync is in kHz unless units are specified.
# HorizSync may be a comma separated list of discrete values, or a
# comma separated list of ranges of values.
# NOTE: THE VALUES HERE ARE EXAMPLES ONLY. REFER TO YOUR MONITOR'S
# USER MANUAL FOR THE CORRECT NUMBERS.
# HorizSync 30-64 # multisync
# HorizSync 31.5, 35.2 # multiple fixed sync frequencies
# HorizSync 15-25, 30-50 # multiple ranges of sync frequencies
# VertRefresh is in Hz unless units are specified.
# VertRefresh may be a comma separated list of discrete values, or a
# comma separated list of ranges of values.
# NOTE: THE VALUES HERE ARE EXAMPLES ONLY. REFER TO YOUR MONITOR'S
# USER MANUAL FOR THE CORRECT NUMBERS.
Identifier "sun"
HorizSync 31.5 - 82.0
VertRefresh 50.0 - 90.0
EndSection
Section "Device"
# The chipset line is optional in most cases. It can be used to override
# the driver's chipset detection, and should not normally be specified.
# Chipset "generic"
# The Driver line must be present. When using run-time loadable driver
# modules, this line instructs the server to load the specified driver
# module. Even when not using loadable driver modules, this line
# indicates which driver should interpret the information in this section.
# The BusID line is used to specify which of possibly multiple devices
# this section is intended for. When this line isn't present, a device
# section can only match up with the primary video device. For PCI
# devices a line like the following could be used. This line should not
# normally be included unless there is more than one video device
# intalled.
# BusID "PCI:0:10:0"
# VideoRam 256
# Clocks 25.2 28.3
Identifier "Standard VGA"
Driver "vga"
VendorName "Unknown"
BoardName "Unknown"
EndSection
Section "Device"
#VideoRam 65536
# Insert Clocks lines here if appropriate
Identifier "geforce"
Driver "nvidia"
EndSection
Section "Screen"
Identifier "Screen 1"
Device "geforce"
Monitor "sun"
DefaultDepth 24
Option "AddARGBGLXVisuals" "True"
SubSection "Display"
Viewport 0 0
Depth 8
Modes "1280x1024" "1024x768" "800x600" "640x480"
EndSubSection
SubSection "Display"
Viewport 0 0
Depth 16
Modes "1280x1024" "1024x768" "800x600" "640x480"
EndSubSection
SubSection "Display"
Viewport 0 0
Depth 24
Modes "1280x1024" "1024x768" "800x600" "640x480"
EndSubSection
EndSection
Section "Extensions"
Option "Composite" "Enable"
EndSection
any ideas here?
Last edited by ssl6 (2007-09-16 07:53:48)

I need help with simple problems. im a student.

i'd like to be advanced with my studies so i will post questions.. i need help on how to answer. thank you.
1. create a java program that will evaluate if the value entered is a positive, negative, vowel, consonant and special characters.
im actually done with the positive and negative using if else statements.. i used an integer data type. now my question is how do conjoin the characters when i need to evaluate a vowel and a consonant. i cant use char either. please help. i dont know what to do yet.
2. create java program that will translate the input from numbers to words. e.g. input:123 output: one hundred twenty-three.
i have an idea to use a switch case statement. but i have no idea on how will i be able to do it. so if you guys can help me.. well then thankies..

Welcome to the Sun forums. First, please note that you have posted in the wrong forum. This forum is for topics related to Sun's JavaHelp product. You should post your questions in the New to Java forum.
As part of your learning, you will have to develop the ability to select an approach to a problem, create a design that reflects that approach, and then implement the design with code that you create.
So, it's inappropriate for us to take the problem statement that you have been given and short-circuit your learning process by giving you the implemented problem solution. We can comment on the individual questions that you may have, and point out problems and errors that we see in the code that you develop.
As a hint, when you are stuck, forget about Java and programming. Just start with a sheet of paper and a pencil, and figure out how to layout the task on paper. The consider how to translate that to programming.
If you have problems, post short example code that shows the problem, and explain your question clearly. We can't read minds.
Make sure you post code correctly so that it's not mangled by the forum software, and so that formatting is maintained. Select your typed or pasted code block and press the CODE button above the typing area.

Need help in iteration problem

i have a question that requires to use iteration ("for" repetition ) and it inquires to enter each day's cost for a whole week and then calculate and display the total week's cost.
can anyone help me with this? cause i've tried everything i know.

dunno, i dont think it is cause the total is unknown
and it is what i want to getof course the total is unknown. that's what your program does, finds it out. forget computers for a minute. how would you do this with a pen and paper? you'd start off not knowing the total, and ask questions until you had it, right? like
"what were mondays takings?" "oh, 50"
"ok,what were tuesdays?" "um, 102"
"and wednesdays?" "200"
and you'd add the latest answer to your running total. same thing here

Need help with Backup problems - anyone seen this before?

I am experiencing 2 primary problems:
1) When attempting a recent backup with HotSync on my desktop PC (Treo 700p, HotSync Manager v. 6.01, XP): I hadn't backed up for a few weeks, and this time it crashed sometime during the backup of the Calendar (and this behavior is repeated). So I then unchecked the backup of Calendar, but then it just hung on Contacts for about 15 minutes, so I realized it wasn't doing anything anymore (I have lots of contacts, but not not 15 minutes worth). At this point I gave up, but I obviously need to figure out how to make HotSync work again. Any ideas?
2) (not sure if this is the forum to address this): When using Backup Buddy v. 2.04 a couple of days ago, every time I tried to backup, it would get maybe 1/5th into the backup and crash and restart. I figured out in short order that Address.DB is what was causing the crash. [I tried to e-mail the file so I could examine it and save it, but just attaching it in SnapperMail made the device crash]. So I took the chance of deleting the Address.DB (as it seemed small and didn't appear to contain any backup information), and it looks like all of my information was retained. My question here is: two times since the initial problem, something has recreated Address.DB, which again causes the 700p to crash, so I have had to delete it again. So when is this file being (re)created, and what is the purpose of it?
An additional (minor) difficulty that I've had occur on a couple of occasions: After a recovery (where my BackupBuddy information was more current than my HotSync data), I restored, and all the calendar entries were double - 2 identical entries adjacent to one another. Has anyone seen this?
Thanks in advance -
B
Post relates to: Treo 700p (Verizon)

Sounds like the device has become corrupted.
Post relates to: None

Need help troubleshooting: booting problems

I'm a bit stuck troubleshooting and could do with some advice.
A quick backstory: my mid-2010 13" MBP started to refuse to boot and displayed the flashing question mark, so the Geniuses replaced the hard drive connector cable - which sorted the problem for a few months.
So the flashing ? reappeared and I've tried a few fixes but need advice on where to go now, I think it might be a RAM problem.
What I've tried so far:
I've tried erasing and then verify and repair the HD through disk utility, using the OSX DVD, which came up OK.
Reset NVRAM
Clean Install: the HD would show up, but would fail after 30 mins; "Install failed... could not copy the necessary support files."
Ran Apple Hardware Test: showed error 4mem/4/40000000 0xabd93398
Took out each RAM card separately, cleaned with compressed air, tried out each one separately in either slot - still get a flashing ? on startup.
Any thoughts on what I could do would be really appreciated. Thanks for any advice!

If the OS installer failed removing RAM will not fix the damage.
The question mark means a bootable OS couldn't be found. You will need to reinstall the OS & see if the Mac stays stable. You may need to do this with one RAM module to see if the other is causing the crash. The AHT message is a RAM error, re-run the test & change modules to see if it is a particular module or slot that causes it.
You can try booting from external disk to try to rule out the internal HD, but that isn't a practical solution for a laptop, it's more to help diagnose where the fault could be.
You could take it to an Apple store to see if they can help, but I doubt there will be any chance of repairs unless you pay. The first visit will be free, but there is a limited amount of testing that can be done.

Noob needs help with dreamweaver- problem encountered

madelinebeth.net
This is the website i am trying to create. It is not
complete, but on Safari it looks fine. When i open it on firefox,
it gets all messed up and i dont know how to change it. It
initially gets messed up on dreamweaver when i add links o
different slices. Any help would be greatly appreciated.

> is a bug in firefox that does not render correctly using
tables
Never heard of that. Are you sure?
>yes you can use photoshop, fireworks, etc. thats what
they are for
Could not disagree more. Image apps are for
creating/manipulating images.
Period. The HTML they spew is second-rate at best.
Walt
"Silkrooster" <[email protected]> wrote in
message
news:g0t18h$erv$[email protected]..
>A few things I see that need to be changed. your first
issue is tables,
>there
> is a bug in firefox that does not render correctly using
tables. I don't
> recall
> the bug and how it works, but the easiest way to
overcome the bug is to
> use css
> instead of tables.
> The other issue is to add a DTD at the top of your code,
this will stop
> the
> browsers especially IE from using the quirks mode.
> Other than that the code is fine. These problems can
easily be fixed in
> Dreamweaver. And yes you can use photoshop, fireworks,
etc. thats what
> they are
> for, as long as you know the bugs they may create. The
biggest being the
> DTD,
> next is the tables issue, which photoshop can use either
tables or css.
> Fireworks currently only supports tables, hopefully that
will get fixed in
> the
> next version.
> To make sure your code is correct from the get go, it is
best to
> use
> dreamweaver as it is aware of the DTD and can use css or
tables.
> I agree about the leopard skin, way too hard on the
eyes.
> Hope this helps
>

Need help configuring VPN - problems accessing the networks

Hi everyone, hope someone can help me out here.
I'm administering the network for our small company. We basically have two sets of machines - public ones with fixed net addresses (mail, web, dns servers, etc), and private ones behind a wireless router/nat.
Our main need here is to be able to VPN in to the public side, in particular, the mailserver, so that we can get around all the stupid things that get done to SMTP when we connect at the BedBug Inn ("Free wifi, administered by gibbons").
Secondarily, it would be nice to be able to connect to and browse some of the internal machines.
So here is what I did:
* Installed 10.4.10 Server on a machine with two ethernet interfaces, one that has a public IP address, the other connects into the private network. When I'm actually at that machine, things work fine - I can browse the private network shares, connect to the net, etc.
* Configured VPN. I have no problems getting a VPN connection, both sides are happy. The VPN assigns incoming clients IP addresses in the private network IP range, but outside those assigned by the wireless router's NAT.
* Added 192.168.2.1/255 (the private network) and 12.17.29.193/224 (the public network) to the Network Routing Definition box under VPN/Settings/Client Information.
However, here's where it all falls down. Once the VPN is established, I can't connect to any of the public machines, and the only private-side device that seems to respond is the Wireless/NAT box (A Belkin N1). So the only thing I can do is administer the Belkin remotely, which, while nice, is not exactly what I had in mind.
Doing a traceroute while VPN is active to my mailserver shows the first hop direct to the VPN machine, then off into * * * heaven (though I have no idea if traceroute works over VPN!).
One curious note: when I change the order of the Network Routing Definitions so that the public network comes first, and the private one second, I can't contact the Belkin box.
Any advice, oh wise and powerful masters of technology?
Various, but the server is running on a G4 Mac OS X (10.4.10)

I said:
"let's assume I VPN to the wireless box"
You replied:
"That's not correct as it is not the device running the VPN endpoint - in this case. "
But wouldn't I have to (on the VPN client) specify the public IP of the wireless box in order connect (because the packets are forwarded) to the actual OS X box running the VPN? Otherwise, it can't see it.
Part of the problem I have is that I can't dedicate a whole machine to VPN. The OS X machine running VPN is also running DNS, and will eventually run our mailserver and perhaps FTP, web, etc, as I slowly migrate stuff to it.
So this machine has to have a public IP address. It cannot be hidden behind the wireless NAT. And it seems to me that this is the crux of the problem. What I think you are telling me is that if the VPN machine was entirely hidden behind the wireless NAT, and had no direct public (WAN) interface, then since all the packets destined for the outside world (including my public servers)would have to go through the NAT, and all would be OK.
If so, then it seems to me that the best solution is to use something like OpenVPN on another OS X (not OS X Server, since I only have one of those) machine in the private network. Since the incoming VPN traffic will be Mac only, it shouldn't be an issue, L2TP-only is fine.
"Otherwise you have to run NAT and the firewall in the VPN server too and use private IPs for VPN clients - or use "only" it (remove the other NAT box and put it on the LAN only). Using only one device for NAT/gw means less configuration."
It is entirely unclear to me, in my setup, what effect turning on NAT on the VPN box (or perhaps, just IP forwarding) would have -- and if I do turn on NAT, would I still have the VPN assign IP's to clients in the internal private network's range, or would I use a different range (ie: private is 192.168.237.xxx, VPN assigns 192.168.239.xxx) and expect the NAT to handle the conversion?
I'm a bit leery of just trying it and seeing what happens because it if mucks things up so badly that the server becomes unreachable (via server admin), I'll have to schlep down to the office to fix it.
"Other things to consider is "bottlenecks" between your LAN and WAN."
Not a real issue. We have a small office, and a relatively small pipe to the internet. Most of the traffic from that pipe is from the public machines anyway. The traffic that goes through the wireless router is basically websurfing and hitting the mailserver.
I could, of course, use the VPN OS X machine as the NAT/DHCP server, and hang the wireless router off the internal network as a simple access point. But would that resolve all the VPN issues?
Once again, thanks for your helpful and prompt replies.

Need help w/ wierd problem maybe caused by RMI/sockets

Similar Messages

Maybe you are looking for