Outbound web request to internally hosted (natted server)

Hi, I've got an issue with hairpining traffic on the ASA, it's a bit different to the usual VPN in/out query, not sure of the best way to approach this:
[example names/IPs used]
a)Web server hosted in dmz. External DNS resolves www.example.com to 8.8.8.10, ASA NATs 8.8.8.10 (outside) to 192.168.1.10 (DMZ)
b)Outbound web request (from internal network client) 10.0.0.1 is natted to source 8.8.8.9 (outside) - doesn't use a proxy and uses external DNS.
Web browsing to externally hosted sites works fine (as you'd expect), inbound web requests from foreign addresses works fine. When internal client browses to www.example.com, request fails.
I assume this is because the outbound request is Natted to originate from 8.8.8.9 and destined for 8.8.8.10 which is on the same interface on the ASA.
As the client is not using a proxy I cannot manipulate or redirect the request at this level.
What would be the best way to address this issue? Would I create some kind of NAT exception/configuration like :
source=10.0.0.x destination=8.8.8.10 NAT to source=10.0.0.x destination=192.168.1.10? meaning I would have multiple NAT rules (for multiple internally hosted servers) or is there a better way of doing this (given I am working with the outside interface which will include public traffic)? 

So inside hosts are trying to access www.example.com using an external DNS.  is the 8.8.8.10 address being fully NATed to the 192.168.1.10 address or is PAT being used (only specific ports being NATed).  the reason I ask is that an option would be to use DNS doctoring but this is not supported when using PAT.  this is done by adding the dns keyword at the end of the NAT statement.
What version ASA are you running?
Another option would be to NAT the 8.8.8.10 to 192.168.1.10 from the inside to the DMZ.  NAT exemption will not work as that just prevents NATing from taking place.  You would need to NAT traffic destined for 8.8.8.10 on the inside interface to the DMZ.
Both options are good options, but if possible I would go with the first option.

Similar Messages

  • Send Port to internally hosted IIS web service needs to run on the SAME IIS SERVER from multiple orchestrations

    Hi
    We have a multi-server BizTalk environment. We have an Orchestration with multiple call orchestrations in it. Each called orchestration is calling a web service through a 2 way Send Port (which is hosted in IIS on each BizTalk server in our multi server
    environment). We have to ensure that each called orchestration is calling these web services on the same IIS server.
    I could create a dedicated host instance that the Send Port runs under to run only on one server but then this means that all our DBase traffic is happening on one server. We also thought about using the load balancer some how to achieve this through sticky
    sessions etc.
    This is all necessary because we are using Entity Framework exposed through web services and we need to manage transactions.
    Any ideas on how we may achieve this. I have inserted a picture to try and show the scenario
    Biztalk Developer

    Haha, Entity Framework strikes again!  But seriously, that is a rather odd architectural requirement, double check first. But anyway...
    Try this: Configure the Send Port URI to point to something like http://localservicehost/[yourEFService]
    Then in the local hosts file (the DNS/IP hosts file), define localservicehost to the local IP address where the service is listening.
    That way, the connection will always be made to the local machine.  Essentially the same as localhost.

  • ASA 8.2(1) Global and NAT statements, natting certain internal hosts

    Hi, I have what I believe will be an easy question, but I cannot find the answer and cannot afford to test it on our production ASA.
    I am running an ASA firewall, we are performing PAT with one Public IP Address for all inside traffic accessing the Internet.  We need to implement a solution where whenever two or three internal hosts/servers access the Internet, they need to appear to come from a unique public IP, different than the current Global IP for all other internal traffic.  I understand I could Nat thier Internal IP Address to a public IP, but I don't need each server to have it's own public IP, I'd like for all of them to share one.
    Thoughts on how to accomplish this?  Thanks!

    Hi,
    To my understanding you would just create a new Dynamic PAT configuration using different NAT ID for these hosts.
    Though when you create a separate Dynamic PAT for some hosts with a new NAT ID you will have to make sure that this NAT ID has a rule towards any interface they had before.
    In a very basic setup there should only be Dynamic PAT between your "inside" and "outside" interfaces (presumed thats what they are called on your firewall)
    This would mean that if you had for example a network 10.10.10.0/24 and you performed Dynamic PAT for that network using the "outside" interface IP address you would then configure the following
    global (outside) 1 interface
    nat (inside) 1 10.10.10.0 255.255.255.0
    So the above is probably the type of configuration you have at the moment?
    For the 2/3 hosts you have that need a different PAT IP address you could probably configure something like this (1.1.1.1 is just an example IP instead of the actual public IP address that is different from the interface IP address)
    global (outside) 2 1.1.1.1
    nat (inside) 2 10.10.10.1
    nat (inside) 2 10.10.10.2
    nat (inside) 2 10.10.10.3
    If the original ID 1 NAT rule had "global" statements for some other interface then you would most likely need ID 2 configurations for those too. Though generally Dynamic PAT is only performed towards other external networks which usually means only the "outside" interface.
    Without seeing the configurations I dont think I can say much more.
    Naturally "packet-tracer" is an excellent command to confirm what what NAT/PAT is applied for a hosts connection.
    For example if you wanted to test host 10.10.10.1 applied ASA configurations/rules towards some external hosts you could issue this command
    packet-tracer input inside udp 10.10.10.1 12345 8.8.8.8 53
    This should tell you what NAT translation is performed for this traffic (it simulates a destination port UDP/53 connection towards 8.8.8.8). Naturally you can also confirm things through firewall logs and the translation table of the device.
    Active translations on the firewall you can show with the command
    show xlate
    It does have a lot of additional parameters after the "xlate" if you want to have more specific output
    Hope this helps
    Please do remember to mark a reply as the correct answer if it answered your question.
    Feel free to ask more if needed
    - Jouni

  • HTTP web request error (Web exception for remote server)

    To whom it may concern,
    I have recently applied a few patches for my client's server for IE9 but then one application starts to malfunction right after upgrade return successful. The program affected is CyberTech player which make use of Microsoft Silverlight. 
    My client currently uses Wind 2008 R2 x64, patches applied are below:
    MS13-009-IE9-Windows6.1-KB2792100-x64
    MS13-010_IE9-Windows6.1-KB2797052-x64-sp1
    MS13-021_IE9-Windows6.1-KB2809289-x64
    MS13-028IE9-Windows6.1-KB2817183-x64
    MS13-037_IE9-Windows6.1-KB2829530-x64
    MS13-038_IE9-Windows6.1-KB2847204-x64
    MS13-047_IE9-Windows6.1-KB2838727-x64
    MS13-069_IE9-Windows6.1-KB2870699-x64
    Please let me now if any further information is needed.
    Your prompt response will be much appreciated.

    Hi,
    Based on your description, I would like to suggest you try to uninstall and reinstall the latest version of Microsoft Silverlight.
    http://www.microsoft.com/silverlight/
    I also would like to suggest you update the CyberTech player so that it can be compatible with this update.
    Meanwhile, the http web request error was caused by IE itself:
    1. Improperly install or configure updates
    2. Security website authentications issue
    3. IE settings
    You may try the following steps to check the issue:
    1. Run IE with no add-ons. Click Start -> All Programs -> Accessories -> System Tools -> Internet Explorer (with no add-ons). 
    2. Try to use compatibility mode (go to tools --> Compatibility View Settings) to check the issue.
    For further research, it would be kind of you to capture a screenshot of the error page.
    Hope it helps.
    Regards,
    Blair Deng
    Blair Deng
    TechNet Community Support

  • How can I use a SWF as a web request proxy between Javascript and my server?

    I know I can call my server directly from javascript.  However, I want to do this through a non-GUI SWF file.
    I'm fairly new to Flash but have gotten all the CS3 tools from work.
    Does anyone know of any examples on:
    1. how to make a web request from within flash provided the URL, post content, and timeout
    2. how to call a Flash API from javascript asynchronously
    3. how to detect whether the browser being used can support my SWF (I don't want it to prompt to install Flash if they don't have it yet)
    I'm actually hoping someone has already done this and has a sample already built.
    Thanks for any help.
    Kevin

    glkad - I think you misunderstood what I'm after.
    I don't just want to send the browser to another URL.  Here's the flow:
    A. javascript initiates a GET or POST web request through the SWF file providing a timeout
    B. the SWF actually makes the request to the server failing if the timeout is exceeded
    C. the SWF notifies the javascript when the call is complete (or times out) and provides the content returned from the server as a string
    I'm looking for more details regarding your answer #3.  HOW can Idetect if flash is available?  (remember, I'm a newbie at flash )
    Thanks.
    Kevin

  • The KDC encountered duplicate names while processing a Kerberos authentication request in a Domain controller server

    HI
    we have a sharepoint farm and in domain controller server, this error is in event viewer
    Log Name:      System
    Source:        Microsoft-Windows-Kerberos-Key-Distribution-Center
    Date:          9/15/2014 10:44:15 PM
    Event ID:      11
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXAPP01.xxxportal.com
    Description:
    The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is HTTP/XXXWFE01.xxxportal.com (of type DS_SERVICE_PRINCIPAL_NAME). This may result in authentication failures or downgrades to NTLM. In order to prevent
    this from occuring remove the duplicate entries for HTTP/XXXWFE01.xxxportal.com in Active Directory.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kerberos-Key-Distribution-Center" Guid="{3FD9DA1A-5A54-46C5-9A26-9BD7C0685056}" EventSourceName="KDC" />
        <EventID Qualifiers="49152">11</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-09-15T19:44:15.000000000Z" />
        <EventRecordID>131824</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>System</Channel>
        <Computer>XXXAPP01.xxxportal.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data Name="Name">HTTP/XXXWFE01.xxxportal.com</Data>
        <Data Name="Type">DS_SERVICE_PRINCIPAL_NAME</Data>
        <Binary>
        </Binary>
      </EventData>
    </Event>
    adil

    Hi adil,
    Service principal names (SPNs) are stored as a property of the associated account object in Active Directory
    Domain Services (AD DS). I noticed that you have used setpn –X to identify the duplicate SPN. Please refer to following articles and check if help you to solve this issue.
    Event ID 11 — Service Principal
    Name Configuration
    Event ID 11 in the System log of domain controllers
    Please also refer to following article and check if can help you.
    The problem with duplicate SPNs
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
    does not guarantee the accuracy of this information.
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu

  • JMS Internal Error at Server Client Adapter!JMS Service is not started

    Hi
    Can any one tell me how to trouble shoot for following errors:
    Failed to Create Connection! Reason: Response from the server could not be reached.
    JMS Internal Error at Server Client Adapter!JMS Service is not started
    The following hosts could not be reached 143:223:221:10:50310
    We are trying to send the request from SONICMQ JMS to R/3 and trying to post the response to Sonic Queue. but we are facing some problems for JMS adapter .
    but in JMS sender and receiver adapter i gave different IP and port for listen the SONIC queue. why it is showing in different IP here? this message got from logviewer.
    regards
    Rambarki...

    Rambarki,
    What is the error displayed on the Adapter Monitoring pages?
    Generally the correct error descriptions for connectivity issues are found on adapter monitoring UI than any other.
    Other possible reasons could be :
    <i>JMS Service is not started
    The following hosts could not be reached 143:223:221:10:50310</i> This might be issue with your network settings i.e. XI server is unable to reach the specified IP on specified port.
    Regards,
    Amol

  • Exchange connector to hosted Exchange Server gives Connection errors in log.

    I have setup the exchange connector within SCCM 2012 R2 CU3. Everything seems to work. I get the EAS connected devices discovered in the SCCM console.
    The Hosted Exchange server I used is https://ps.outlook.com/PowerShell-Live-ID
    Although everything seems to work i frequently get the following errors in the EASdisc.log:
    ERROR: [MANAGED] Failed to open Runspace. Exception: System.Management.Automation.Remoting.PSRemotingTransportException: Connecting to remote server failed with the following error message : The SSL connection cannot be established. Verify that the service
    on the remote host is properly configured to listen for HTTPS requests. Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command
    on the destination to analyze and configure the WinRM service: "winrm quickconfig -transport:https". For more information, see the about_Remote_Troubleshooting Help topic.~~ &nbsp; at System.Management.Automation.Runspaces.AsyncResult.EndInvoke()~~
    &nbsp; at System.Management.Automation.Runspaces.Internal.RunspacePoolInternal.EndOpen(IAsyncResult asyncResult)~~ &nbsp; at System.Management.Automation.Runspaces.RunspacePool.Open()~~ &nbsp; at System.Management.Automation.RemoteRunspace.Open()~~
    &nbsp; at Microsoft.ConfigurationManager.ExchangeConnector.ExchangeRunspace.InitRunspace()
    ERROR: Failed to call Initialize of managed COM. error = Unknown error 0x80131501
    ERROR: Failed to initialize managed com instance. Error = Unknown error 0x80131501, -2146233087
    There is no fixed interval in which these errors are reported.
    Can i neglect these errors, or am I missing something?
    I found the following thread without a solution:
    http://community.office365.com/en-us/f/156/t/265109.aspx

    Try to use FQDN of Cas server in URL and Add CASADMIN into all the three Exchage Roles: Recipient Management; View Only Organization Management; and Server
    Management. Enabled the Windows Authentication on Exchange CAS Server for /powershell in IIS.
    Also You can check below link
    https://social.technet.microsoft.com/Forums/en-US/e7ca3f0c-a793-4437-8050-2de4c9d9253c/exchange-connector?forum=configmanagergeneral
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"Mai Ali | My blog:
    Technical | Twitter:
    Mai Ali

  • Multiple Web Sites on OS X Mavericks Server

    I want to run multiple test web sites off my home Mac OS X Mavericks Server 10.9 can someone point me to a good "How to" on the specific of how to use the Server application to create and operate multiple web sites of a single Mavericks Server?
    Example
    MyServer.inno.com          10.0.2.5
    Basic web is up and running....
    I want to host four other web sites off the same machine for testing purposes how do I do that?
    MyServer.inno.com          10.0.2.5
    MyServer.web1.com          10.0.2.5
    MyServer.web2.com          10.0.2.5
    MyServer.web3.com          10.0.2.5
    MyServer.web4.com          10.0.2.5
    so if I go to the server and load
         MyServer.web1.com          10.0.2.5
    it load a different web server.
    My thought is to use virtual host how does Apple / Community recommend I set this up...
    T.

    Please do not squat in the "home.com" domain.  If you're going to use a bogus domain, please use a bogus to-level domain such as server.home.jarvis — .jarvis is not currently a valid top-level domain, though that might change with the way ICANN has been bringing many new top-levels online, so a real registration is safer here.
    Peter Jarvis wrote:
    Assumptions:
         1. The Server is not intended to be publicly accessable from the Internet
    How will it be accessed?  Entirely privately?  No external access?  OK.
         2. Private Network - 10.0.1.X
    I'd probably pick something a little further into 10, such as 10.8 or 10.10, or 10.20.1.x — if you're ever using a VPN, it's best to use a weirder subnet, and I've worked with several folks that have 10.0.1.0/24 subnets.
         3. DHCP Reservation for the Mac Server - 10.0.1.2.
    I usually prefer keep the server and the other fixed-address hosts outside the DHCP pool.
         4. Server Domain name MacServer.home.com
    Are you the registrant for the home.com domain?  (I'd tend to doubt that, and would therefore suggest use of a real and registered domain or subdomain that you have permission to use or (less desirably) use a bogus top-level domain.)
         5. Example Web Site http:www.rouxacademy.com to also run off the same server...
    Is that going to be public?
    Prequisites:
         1. Static Server IP Address / DHCP Reserved IP Address against MAC Address
         2. DNS Service Configured and Running
         3. Web Service Configured and Running
         4. Example Web Site http:www.rouxacademy.com
         5. You have a basic website (with mysql) files available
                   Directory roux_academy (Contains Basic Web SIte files etc)
    OK.
    Steps:
         1. Static Server IP Address / DHCP Reserved IP Address against MAC Address
    The Airport Airport allows you to Reserve and IP address against a MAC (Media Access Control) physicall address of Server Ethernet Card. You can do this or have the Airport allocated DHCP address from 10.0.1.50 and above and statically allocate the server address of the machine.
    I'd leave the server out of the address pool.  So long as the pool and all static IP hosts are in the same block (usually a 255.255.255.0 or /24 subnet) it'll all work, and you won't need to entangle the OS X Server with the DHCP server.
         2. DNS Service Configured and Running
    Install Mavricks, install OS X Server application, launch server app...
    Go to DNS tab, define a new host name MacServer.home.com and associate with 10.0.1.2 IP Addresss
    Start DNS Service...
    Note: DO not publish DNS service via airport to Internet...
    Other than not squatting in that domain, yes.  There's no reason to open TCP or UDP port 53 inbound.
         3. Web Service Configured and Running
    Go to Web Sites tab...
    Click + and create new web site entry
    Domain Name:                http:www.rouxacademy.com
    IP Address:                     Any
    SSL:                               None
    Store Files in:                /Volumes/dev/Library/Server/Web/Data/Sites/roux_academy
    Who can access:          Anyone # I would restrict to a single user
    Additional Domains:     rouxacademy.com
    no http: prefix there, but yes.
    If you're not exposing the server to the 'net (as mentioned above) there's probably no need to restrict.  If you do need to restrict, you'll need to edit configuration files for Apache, or some other technique — maybe a VPN, if you're allowing (controlled, VPN-based) inbound access into your network.
    Start Web Service...
         4. Back to DNS
    Add host name....
    www.rouxacademy.com / 10.0.1.2
    # Do not create an MX record or publish DNS via airport...
    AirPort does not know from MX records, and does not provide DNS services.  AirPort will know about your local DNS server, since you are apparently using the AirPort for DHCP.
    You can also add the DNS translation during step 2; Apache and DNS are not tightly linked here.
    Launch Safari and type
         www.rouxacademy.com          - should launch web site...
         rouxacademy.com                   - should launch web site
    Caveat: the Real rouxacademy.com will not be accesable from the server or local machines on 10.0.1.X network...
    Ah, so there's a key detail — you're playing games and mimicking a real web site?  OK.
    The rouxacademy.com web site will be accessible from the server, as that'll (also) have the DNS translation (and remember the basis for virtual hosting is the client — the server in this case — has a translation for the host — the rouxacademy.com or www.rouxacademy.com domain in this case — and passes that string over the HTTP or HTTPS connection to the web server.   If you really want to keep the server from accessing this web site, then you'll have to push the local translation of that domain into the hosts file, or to a separate DNS server. 
    I'd try to avoid this configuration though, particularly as your references to MX earlier implies that this domain might be more active than just the web services discussed here — trying to run split-horizon DNS means you'll get what's internal and external somewhat tangled, and you'll have to keep mail — for instance — aimed outside and web services aimed internally.  This is possible for many cases, but gets tricky.
    Best to test the web site with a different domain name, and to use /-relative notation for accessing the files, or using the web content management system's configuration settings to control the "published" name of the site.

  • Siebel outbound web service  question

    I'm writing a customized 'SendMailing' outbound web service. I have tested my web service with stand alone client, and now I want to integrate it with siebel. My step is:
    1 configure the SendMailingService in Administration -> web services -> outbound web services, in Service Ports panel I set the Address of the 'SendMailing' to my Web service endpoint, such as http://myhost/Siebel/SendMailing?WSDL
    2 configure the Email Marketing Server (in 'Administration -> marketing ->servers), set 'SendMailing' (outbound web service port) to 'Email sending daemon(ESD)', and other parameters such as from address.
    3 create an email treatment which use the configured email marketing server as the delivery profile.
    4 create a campaign with the created treatment and assign a list to the campaign.
    5 load the campaign
    6 launch the campaign.
    after the 6th step is done, nothing happens - no error message, no logs found, the campaign status still remains 'in planning'.
    some other clues:
    1 when I do the 'test email' for the email treatment, the following error log is found:
    ObjMgrLog Error 1 000009ec4bf10fc5:0 2010-05-25 08:16:35 (httptransport.cpp (1631)) SBL-EAI-04117: HTTP Request error during 'Submitting Data SendHTTP request': 'Status code - 500'
    ObjMgrLog Error 1 000009ec4bf10fc5:0 2010-05-25 08:16:35 (httptransport.cpp (981)) SBL-EAI-04117: HTTP Request error during 'Submitting Data Send HTTP request': 'Status code - 500'
    ObjMgrLog Error 1 000009ec4bf10fc5:0 2010-05-25 08:16:35 (soapbinding.cpp (564)) SBL-EAI-04304: Unknown Part 'http://www.bea.com/servers/wls70/webservice/fault/1.0.0:stacktrace' for operation 'createMailing' exists in SOAP message.
    ObjMgrBusServiceLog Error 1 000009ec4bf10fc5:0 2010-05-25 08:16:35 (outdisp.cpp (209)) SBL-EAI-04308: Operation 'createMailing' of Web Service 'urn:xml-send-mailing.SendMailingService' at port 'SendMailing' failed with the following explanation: "[Server CodecHandler] Failed to decode
    -> Unable to find xml element for parameter: options
    I guess siebel does try to invoke the outbound web service for the 'test email', but it seems do nothing for regular campaign launch.
    Did I miss anything? please help! thanks in advance!

    I have known the reason of the error logs: the soap message sent by siebel lacks 2 parameters. The 2 parameters should be contained in the soap message with a value of null or empty if they are really empty, but the siebel removes these 2 parameters from the soap message. So the soap stack of my client refused the soap request. I think this should be a siebel bug.
    Now my question becomes why I can't launch a campaign? I followed the steps of 'create offer' -> create campaign -> associate the offer with campaign -> assign a list->allocate a list->load campaign -> launch campaign. but the campaign just keeps 'In planning'.
    Did I miss anything? Or where can I find some clues? such as logs...

  • Internally hosted sites slow to load through proxy...

    Hi Everyone,
    We're having some issues with internally hosted sites and apps loading slowly while on the internal network. We host a Moodle site, a Joomla site, an Exchange 2007 mail server (sorry, no more GW), and a Senior Systems server. All of these, except for the Joomla site, have an SSL cert from either GoDaddy or Verasign. If you're outside of our network the sites load just fine.
    We're running a Netware 6.5 SP2 box with BM 3.8 on it and use the proxy. We use both IE 8 and Firefox (from 3.0 to 3.6) with either manual proxy settings with exemptions for the above sites, or a PAC file with the same exemptions. I don't believe the PAC file is the issue as the slowness still happens when configuring the proxy manually within the browsers. When a user tries to go to one of the above sites while on our network, the pages won't load for around 5-10 seconds. The browser will say it's connected to the site, but it just sits - and then the page will just pop into place. The Senior Systems server is particularly bad, as at times only the background color loads and a few minutes later the login box will load.
    We have our DNS and DHCP servers running on Windows Server 2003 boxes.
    Thanks in advance,
    -CR Hiestand

    On 01/21/2010 02:36 PM, hiestandc wrote:
    >
    > Thanks for the reply.
    >
    > 1. No, we don't use the reverse proxy. External users go through the
    > firewall, but not the proxy. We currently use the forward proxy for
    > anything going over a web protocal, but have exempted the internally
    > hosted servers within the browsers from doing so - which works, but it
    > extremely slow.
    >
    > 2. No, they resolve to the local IP address.
    >
    > 3. We do use filters, but nothing related to internal sites.
    >
    >
    so if i understood correctly, you do not use proxy to access this sites
    from inside, correct?
    But traffic is still going thru bm, correct?
    otherwise i do not understand why bm is on blame of the slowness. As
    logn as you do not use the proxy, bm is not involved.
    Best approach will be to take a lan trace and see where the delay happens.

  • How can I map SSH from an outside network range to an internal host (ASA 5505)

    Cisco Adaptive Security Appliance Software Version 7.2(4)
    Device Manager Version 5.2(4)
    - External network range that needs SSH access: 8.8.8.0/24
    - Outside interface: 10.1.10.2 (NAT'd from 7.7.7.7)
    - Inside Network: 192.168.100.0/24
    - Inside host to redirect external SSH to: 192.168.100.98
    Hi All,
    I have a Cisco ASA 5505 (version above) and I have someone that needs to SSH into a box behind the ASA. I'm having a few issues trying to configure this access-list and NAT. I've tried many combinations and clearly my IOS is not as good as I thought.
    Can anyone help with this? What commands should I enter to accomplish mapping SSH from an outside network range to an internal host?
    Many thanks,
    Tarran

    This may or may not work depending on how your modem handles the natting. On your firewall try this -
    static (inside,outside) tcp interface 22 192.168.100.98 22
    then add this to your acl on the outside interface of your ASA -
    access-list outside_in permit tcp 8.8.8.0 255.255.255.0 host 10.1.10.2 eq 22
    if you don't have an acl applied then add this extra step -
    access-group outside_in in interface outside
    Jon

  • Cannot start Web Cache in Oracle 10g App Server

    Hi,
    Our Application runs on Oracle10g App Server,
    When it tried to start WebCache using the command
    opmnctl startproc ias-component=WebCache process-type=WebCache
    it shows the error...
    opmn id=oracle10g:6200
    no enabled components for this request
    When i tried to enable WebCache using Enable/Disable Component in Oracle 10g Enterprise manager - I can't see WebCache component it to enabe or disable it.
    When i tried opmnctl status., it shows
    ------------------------------------------------+---------
    ias-component | process-type | pid | status
    ------------------------------------------------+---------
    HTTP_Server | HTTP_Server | 7276 | Alive
    LogLoader | logloaderd | N/A | Down
    dcm-daemon | dcm-daemon | N/A | Down
    OC4J | home | 7684 | Alive
    OC4J | rhs | N/A | Down
    OC4J | instaremit | 5880 | Alive
    OC4J | insta_test_apr_02 | 7100 | Alive
    WebCache is not running, also as the WebCache is not listed in Oracle 10g Enterprise manager, i can' enable or disable it.
    Plz Help me over this.,
    Regards.,
    Deepak.C

    Hi.,
    Thanks again !!!
    Yes, My Oracle HTTP Server is listening on port 80.
    I am not clear, may i know why should the ports be changed for the request to go through Web Cache ???
    Can i assign port 80 for Web Cache and 7778 for HTTP Server ?
    Also In Oracle Enterprise Manager, Web Cache is not available...
    home, HTTP Server, management alll these are there...
    Also for HTTP Server, it's not showing any metric info, 'Not Yet Available' is shown even though the HTTP Server is running, how can i get metric info about Oracle HTTP Server, i have also used dmstool -t ohs_server, its not working
    It's showing... FLEXMON ERROR : detected invalid table name ohs_server
    dmstool -l -t also does'nt lists ohs_server
    Hellp me over this.....
    Deepak.C

  • OBIEE 11.1.1.7-Ago Function Error-[nQSError: 46008] Internal error: File server\Query\Optimizer\SmartScheduler\PhysicalRequestGenerator\Src\SQOSPMarkMultiTargetSupport.cpp

    Hi All,
    I was performing the steps mentioned in Oracle Tutorial"http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/bi/bi11115/biadmin11g_02/biadmin11g.htm#t10"-BI RPD creation.
    After Using the AGO function data in the Time series metric(Month Ago Revenue) was null always. I updated the DB features in RPD physical layers by selecting support for time series functions.
    After that report started to fail with below error. Please let me know if its a bug and any option to fix it.
    Thanks,
    Sreekanth
    Error
    View Display Error
    Odbc driver returned an error (SQLExecDirectW). 
      Error Details
    Error Codes: OPR4ONWY:U9IM8TAC:OI2DL65P 
    State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 43119] Query Failed: [nQSError: 46008] Internal error: File server\Query\Optimizer\SmartScheduler\PhysicalRequestGenerator\Src\SQOSPMarkMultiTargetSupport.cpp, line 1680. (HY000) 
    SQL Issued: SELECT 0 s_0, "Sample Sales"."Time"."Year-L1" s_1, "Sample Sales"."Revenue"."Ago-Year Revenue" s_2, "Sample Sales"."Revenue"."Revenue" s_3 FROM "Sample Sales" FETCH FIRST 65001 ROWS ONLY
      Refresh

    I know that there is no relation between "SampleApp Lite"."D3 Orders (Facts Attributes)"."Order Date", "SampleApp Lite"."D0 Time"."Calendar Date", it's also the same thing in my own RPD.
    But as it's working with the 11.1.1.6.2 BP1 version I don't understand why it's not working with 11.1.1.6.9.
    Implicit fact column is not set on my repository, but I don't have any request with only dimensional column, so if my understanding is correct I don't need to use it. Also, the problem appears during the check of the repository not in answers.
    thanks anyway

  • Error: Request failed. unexpected response from server. the status code of response is '0' in safari browser

    Hi,
    I am using Javascript serializer to send server side code to javascript.
    This works in IE 9, Mozilla, chrome. But fails with error in Safari as "request failed. unexpected response from server. the status code of response is '0' . status text of the response is ". null
    My code is as below:
    <asp:UpdatePanel ID="panLayout" runat="server">
    <ContentTemplate>
    <div id="divloadingImage" >
    <br />
    <asp:Image ID="imgLoading" runat="server" ImageUrl="/images/rotate.gif" ImageAlign="Middle" />
    <br />
    </div>
    <div id="banner-fade" >
    <ul id="carousel" class="bjqs">
    </ul>
    </div>
    <asp:Timer ID="timerRSS" Interval="1" runat="server" ontick="timerRSS_Tick"></asp:Timer>
    </ContentTemplate>
    </asp:UpdatePanel>
    In CS:
    protected void timerRSS_Tick(object sender, EventArgs e)
    DisplayImages();
    divloadingImage.Visible = false;
    bannerfade.Visible = true;
    timerRSS.Enabled = false;
    private void DisplayImages()
    List<SharePointListItem> allImages = GetallImages();
    JavaScriptSerializer serializer = new JavaScriptSerializer();
    string json = serializer.Serialize(allImages);
    string script = string.Format("<script type=\"text/javascript\">var allSliderImages={0}</script>", json);
    if (!this.Page.ClientScript.IsClientScriptBlockRegistered("clientScripts"))
    ScriptManager.RegisterClientScriptBlock(panLayout, panLayout.GetType(), "clientScripts", script, false);
    string scriptRegister = string.Format("<script type=\"text/javascript\">FetchData();</script>");
    ScriptManager.RegisterClientScriptBlock(panLayout, panLayout.GetType(), "clientScriptData", scriptRegister, false);
    In Javascript:
    function FetchData() {
    if (typeof allSliderImages !== "undefined") {
    for (var i = 0; i < allSliderImages.length; i++) {
    Imagesuccess(allSliderImages[i].fileleafref, allSliderImages[i].filedirref, allSliderImages[i].caption1);
    var rota = $("#bannerfade");
    rota.css("display", "block");
    function Imagesuccess(fileLeaf, fileDir, UserCaption1) {
    var ul = $('#bannerfade > ul');
    var li;
    var filename = fileLeaf;
    var dir = fileDir;
    var caption1 = UserCaption1;
    var sfils = filename;
    filename = dir + '/' + filename;
    var imageCaptionData;
    if (caption1 != null && caption1 != "") {
    imageCaptionData = '<div class="HeadlineDiv">' + caption1 + '</div>';
    li = $('<li>' + imageCaptionData + '<div class="SubHeadline" style="color:white;">' + '<br/></div>' + '<img src="' + filename + '"/>' + '</li>');
    ul.append(li);
    $('#bannerfade').bjqs({
    height: 354,
    width: 970,
    responsive: true
    Below is the data I get:
    <script type="text/javascript">
    var allSliderImages=[{"id":"1","Title":"Scenic","caption1":"scenic","fileleafref":"02.jpg","filedirref":"/s/Test/Library"},
    {"id":"2","Title":"nature","caption1":"scenic2","fileleafref":"C034.jpg","filedirref":"/s/Test/Library"},
    {"id":"3","Title":"Tiff","caption1":"Tiff","fileleafref":"test_tiff.tif","filedirref":"/s/Test/Library"}]</script>
    The data is shown in all browsers except Safari. How to fix this?
    Update: I have checked this link: http://sharepoint.sureshc.com/2013/07/unexpected-response-data-from-server-in.html
    but that did not help.
    Thanks

    Hi,
    From
    this documentation, though SharePoint 2013 supports several commonly used web browsers including Apple Safari (latest released version), it is not guarantee
    that SharePoint 2013 can run perfectly on all these browsers, “certain web browsers could cause some SharePoint 2013 functionality to be downgraded, limited, or available only through alternative steps”.
    According to the code provided, it seems more relate to ASP.NET, therefore, a suggestion is that you can open a thread in ASP.NET forum, communities there will be more familiar
    with this issue:
    http://forums.asp.net/
    Thanks
    Patrick Liang
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Patrick Liang
    TechNet Community Support

Maybe you are looking for

  • Updating entries in a ztable

    Hi, I have a database table with the following structure: - MANDT: -        PK (Primary Key) PLANT: -         PK MATNR: -        PK VALID TO: -     PK VALID_FROM The table contains a record such as the following: - 400    3330    material1    31/12/9

  • Quality Inspection with Intervals

    Dear All, We have a requirement where in our client wants that during GRN of bought out material, every alternate GRN should go for Quality Inspection setup. THis frequency can be variable though. How can this be achieved in system. Please note that

  • Regarding logical and virtual

    Hello, can any one tell me the differences between logical and virtual.

  • Manual for laptop BIOS v1.20 ?

    Guys, hi! Please help me find a manual for the BIOS for my laptop -  HP ProBook 470 G1 (E9Y73EA). There are a bunch of settings that I can't understand. BIOS is version 1.20 (AIDA64 calls it "Compaq EFI v.120 L74" whatever that means) Searched everyw

  • Generate Idoc from Remote function call

    Hi, Earlier i have done RFC which is been called with JCO and and sends datastream as well xml. Now my doubt, is it possiible to generate the idoc for external application through RFC call from JCO? if so, can anyone send me appropriate links or advi