Routing for a single domaion

Hello All,
A little background information first. I'm an IT specialist with the National Oceanic and Atmospheric Administration (NOAA) and provide technical support and mail system development to our fleet of ocean survey vessels.
We have a somewhat unique requirement to support our ocean going research vessel mesaaging systems. Since the vessels are at sea, and moving, they
do not have a connecion to the internet or NOAA WAN. We've developed a custom MTA solution that receives email from the Sun messaging server as SMTP traffic and then stores the e-mail as a compressed text file. These compressed files are then transferred between ship and shore via sattelite link or cell phones. The files are decompressed, read and then sent via SMTP to the relaying messaging server on shore. Message delivery to the ship works the same way, only in the reverse direction. This system has been in use for 6 years using Netscape Messaging Server 4.
Although our MTA system overcomes the lack of a TCPIP conncetion for message delivery, the problem that still exists is the synchroniztion of the LDAP.
Since we can not keep the LDAP synchronized we create one LDAP to contain all shipboard accounts , that the messagging server uses for lookup, and another instance that contains all other @noaa.gov addresses which is provided only as an IMAP client lookup directory. This apporach worked fine with Netscape as it only used the User ID lookup, did not care about the domain, to verify that a user was local.
Here is the problem we now face:
1) NOAA requires that all users, shipboard and shore based, have an email address in the @noaa.gov domain.
2) The direcories can not be synchronized between ship and shore to stay current.
We can configure the Sun MTA, using imta.cnf to deliver "noaa.gov" domain locally but any addresses that are not in the ship LDAP ( shore based addresses) are rejected with a 5.1.1 error code at the client SMTP session.
We can configure the system to send all @noaa.gov mail to our Ship MTA, bu then no mail is delivered locally.
The question: Is there any way to accomplish both on Sun Messaging Server 6.3 as we did on Netscape 4?
Ideally we would prefer to have a rewrite rule, or other mechanism, that routes all local mail to the Sun system and any @noaa.gov addresses not in the LDAP to the Ship MTA system via SMTP. These rules both have to work at the same time and of course the mail domain name is the same for local mail and relayed mail.

BruceStone-NOAA wrote:
Here is the problem we now face:
1) NOAA requires that all users, shipboard and shore based, have an email address in the @noaa.gov domain.
2) The direcories can not be synchronized between ship and shore to stay current.
We can configure the Sun MTA, using imta.cnf to deliver "noaa.gov" domain locally but any addresses that are not in the ship LDAP ( shore based addresses) are rejected with a 5.1.1 error code at the client SMTP session.
We can configure the system to send all @noaa.gov mail to our Ship MTA, bu then no mail is delivered locally.
The question: Is there any way to accomplish both on Sun Messaging Server 6.3 as we did on Netscape 4? Assuming I have a full grasp of your requirements this should be pretty straight-forward.
The mailroutingsmarthost: LDAP domain attribute allows you to specify a 'fall-back' system for email addresses of a domain that are not defined in the LDAP directory. This is usually used during migration between non-LDAP legacy systems and Sun Messaging Server when there are legacy accounts for an email domain that haven't been migrated.
So for example I have two test MTA's configured with the same domain (aus.sun.com) but pointing at different directories and they have different users defined.
For the LDAP directory instance that mta1 uses I added the following (schema 2):
bash-3.00# ldapmodify -D "cn=directory manager" -w ********
dn: o=aus.sun.com,dc=aus,dc=sun,dc=com
changetype: modify
add: mailroutingsmarthost
mailroutingsmarthost: mta2.aus.sun.com
I then sent an email to "[email protected]" to mta1.aus.sun.com, this was accepted and then relayed to mta2.aus.sun.com (where I defined the address "[email protected]" as an alias of a user in mta2's LDAP directory) and the email was accepted/delivered locally into mta2's store.
Any addresses defined in mta1's LDAP directory are delivered locally to mta1 as per usual.
Regards,
Shane.

Similar Messages

Using ASA 5510 and router for dual WAN Connections.

Guys, neeed some help here:
Context:
1- My company has one ASA 5510 configured with Site-to-site VPN, Ipsec Cisco VPN and AnyConnect VPN.
2- We use ASA to connect to the single ISP (ISP 1) for internet access. ASA does all the NATing for internal users to go out.
3- A second link is coming in and we will be using ISP 2 to loadbalance traffic to internet (i.e. business traffic will go via ISP1 and “other” traffic will go via ISP2).
4- A router will be deployed in front of the ASA to terminate internet links.
5- No BGP should be used to implement policy (traffic X goes via ISP1, traffic Y goes via ISP2).
Questions:
How do I get this done, particularly, how do I tell the router, for traffic X use ISP1 and for traffic Y use ISP2? PBR is my friend?
Since I will be having 2 public Ip Addresses from the 2 ISPs, how do I NAT internal users to the 2 public Ip addresses ?.
Finally, which device should be doing the NATing? The ASA just like now or move NATing to the Router?
Thanks
Ndaungwe

Hi,
Check the below link, it gives information on trasperant fw config and limilations. Based on the doc, you may need to move the VPN /anyconnect to router as well. From the routr end you may be able to set up static routes pointing to diff ISP based on traffic needs but this will be compleicated setup and can break things. Wait for other suggestions or if possible stick to ASA to terminate both links and still route the traffic to diff ISPs (Saves the router cost as well).
http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml
Thx
MS

Enabling log4j for a single class or package

hi all
If i use log4j for logging in my classes,
is there a way for enabling it just for a single class or a packages?
Considers that i use log4j.properties for configure it
Regards
Giovanni

Two things. Firstly, it's better to use private static final Object classLock = new Object();because that saves you worrying about whether any other code synchronises on it. Secondly, if you do decide to go for the delegation route then java.lang.reflect.Proxy may be a good way forward.

Dynamic routing for a Business Service with multiple operations

I have two business services with multiple operations. Business service A (bsA) has operations OpA1 and OpA2. Business service B (bsB) has operations OpB1 and OpB2.
Depending on incoming Proxy message and operation, I have to do one of the following
1. If someValue = A and operation= Op1 then invoke operation opA1 of bsA
2. If someValue = B and operation= Op1 then invoke operation opB1 of bsB
3. If someValue = C and operation= Op1 then invoke operation opA1 of bsA AND* operation opB1 of bsB and return aggregate data of both invocations
1. If someValue = A and operation= Op2 then invoke operation opA2 of bsA
2. If someValue = B and operation= Op2 then invoke operation opB2 of bsB
3. If someValue = C and operation= Op2 then invoke operation opA2 of bsA AND* operation opB2 of bsB and return aggregate data of both invocations
Using a dynamic route node or dynamic routing options, I am able to achieve cases 1, 2, 4, and 5.
But for cases 3 & 6, I can not use a route node. When I use a Service call out instead, then I am forced to create a Operational branch but that does not seem like the best design since for every new operation added to the business services, I have to add a new branch to the Operational branch and redo all the functionality for that branch.
Basically, I am looking to achieve the functionality of the Route node ( no need to specify the operation ).
Any thoughts/ideas on what the best design would be?
thanks

For cases 3 & 6, why don't you route to another proxy service where you can simple do two service callouts, merge output data somehow and return them to the first proxy?
If you look for "special route feature", that could possibly call two services for a single message, I'm afraid you won't succeed.

Max. number of interface and route for a vrf

Hi all,
for a single vrf how many interface and how many routes can i have?
Does a limit exist? Or it dipends only by the memory capacity of the router?
Thanks in advance
Gianluca

Hi,
there is only the memory and the CPU load of the PE limiting those values.
Regards, Martin

SonicWall SourceNAT VPN setup as default route for all traffic!

Hi,OK hope someone can help with this mess.....Our customer has been taken over by a US company who have said all outgoing internet traffic must go via their data centre. They want us to create an IPSEC vpn from our SonicWALL TZ215 to them then route all traffic locally via this VPN.In principle this didn't sound too bad. Then there were some more options:Our local subnet 172.x.x.x has to be NAT'd to a single /32 address. 192.x.x.131They also require our destination network to be set as 0.0.0.0. as they wont specify the range at the datacenter.I have managed to get the VPN up but using the the NAT address as my local subnet and using the option on the SonicWALL "Use this VPN Tunnel as default route for all Internet traffic" on the remote network. Phase 1 and Phase 2 work ok. The problem i now have is i need to route all LAN traffic...
This topic first appeared in the Spiceworks Community

Hi Norbert,
I am sorry to say that configuring routes in Azure Virtual network is not supported. I recommend you to submit your reuqirement on Azure Feedback and hope it would be released soon:
http://feedback.azure.com/forums/217313-networking-dns-traffic-manager-vpn-vnet
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Hub router for VPN

We're replacing a third party router with a Cisco 1721. This location is the hub of multi-location (3 remote sites) VPN.
The 3 remote sites are all on fixed public IPs.
I've seen examples of both no assupmtion/restriction of remote IPs (crypto isakmp key [key] address 0.0.0.0 0.0.0.0); as well as setting a key per remote (crypto isakmp key [key1]address [remote ip1]
crypto isakmp key [key2] address [remote ip2]
crypto isakmp key [key3] address [remote ip3]
Is there a disadvantage/security concern to using the quad-0 approach?

There are no advantages or disadvantages other than what should be obvious.
Single key.
Advantage: Simple administration, common config on all routers.
Disadvantage: Potentially allows anyone to connect to the router from the Internet if not forbidden by another policy on the router.
Multiple keys.
Advantage: ISAKMP can not be negotiated if not specifically configured on the router for that remote IP address. Conceptually more secure.
Disadvantage: More administrative overhead.
With 3 sites, the specific key per site is fairly easy to do. If you had 200 sites, that method would be much less doable. You could do a quick estimate. (N * 5) + (N ^ 2) minutes to do your entire network, or something in that line.
It's much easier if you have a system that manages this for larger installs. I believe this is the one of the purposes of Cisco's GET VPN.
Rob

Ea 2700 has anyone been able to configure this router for trapping on a port

ea 2700 has anyone been able to configure this router for trapping on a port....if so can you help us?

Hi,
What do you mean by trapping on a port? Is it the same as port forwarding? The following link might help:
Setting up single Port Forwarding on Linksys Wi-Fi Routers and Smart Wi-Fi Routers

How to set Compatibility Mode for a single site in ie10

This question was originally posted on the Answers forum -
http://answers.microsoft.com/en-us/ie/forum/ie10-windows_7/how-to-set-compatibility-mode-for-a-single-site-in/187152e3-142a-4d96-8d1b-af82ef571eec
I am having problem with getting ie10 to set ie9 compatibility for a single site (sharepoint.contoso.com).
When I add this website in Compatibility View Settings (Alt > Tools > Compatibility View Settings > 'Add this Website') it adds the domain 'contoso.com' and not the individual website (sharepoint.contoso.com).
This cause other sites (www.contoso.com) to be configured to use compatibility mode. Because this is a separate site (different web server) to the site sharepoint.contoso.com (sharepoint 2010 server) we need different compatibility settings.
Using a different example to explain the issue -
Microsoft has three websites that are different websites created by different developers written in different programming languages and they only work with certain browsers.
microsoft.com (Website1 created by Developer1) - compatible with ie8/ie9/ie10
msdn.microsoft.com (Website2 created by Developer2) - compatible with ie8/ie9
technet.microsoft.com (Website3 website created by Developer3) - compatible only with ie10
The only thing the three website share is the URL contains 'microsoft.com'.
Marking 'msdn.microsoft.com' to run in compatibility mode affects the other 2 websites - mainly technet.microsoft.com which will not work now since it only runs in pure ie10 mode.
Should you be able to add an individual site to the compatibility list instead of all sites that have .microsoft.com in the URL? Am I missing a simple setting in the ie10?
As a workaround I am using the F12 Developer Tools to set the Browser Mode which temporary sets the compatibility mode. However this is not a nice solution to the end users at our organisation.

problem is not solved for non corporate environments...
You could start your own thread. Then if you got that answer and it was marked Answered you would have the ability to unmark it. The OP of this one seems satisfied. Also note that this is TechNet. Consumers can get help on Answers
forums.
Robert Aldwinckle
Oh! I wrote it wrong: I should have said: This is not solved for NON-AD environments. No demands what so ever to use Window 7/8 professional in a small corporation or on a big corporation with Island of smaller departments for example offshore.
The problem is that the thread is not "Answered" by the OP, its is marked answered by a moderator (and same moderator that did the answer) so no way of telling if the OP is satisfied.
But you are right in the fact that I am almost kidnapping the thread. But a complete answer would benefit all in this case I would presume.
Regards
/Aldus

No calendar change for a single event in a recurrring string of events

Why won't iCal allow me to change the calendar for a single event in a string of recurring events? Why am I not allowed this, but can change other details and even get prompted whether I want these changes to take effect over the single event or all the recurring events????
Could this be implemented in a future version of iCal???
Thanks.

How are you making the .ics file? What value has the METHOD: entry?
AK

Is it possible to view your current history for a single tab in safari lion

Is it possible to view your current history for a single tab in safari lion?

Not once the tab has been closed. If it hasn't, clicking and holding the Back button will display the titles of recently visited sites in that tab.
(68280)

There are two transactions ZJPVCS303 and ZJPVCS303_US for one single Report

When run as a batch program, (currently this is the case), or withT-Code ZJPVCS303 the selection screen is unchanged (except for additional sales area above)
- When run as T-Code ZJPVCS303_UL (UL stands for Upload) the selection screen is changed. The unix file option is no longer available, and the user is able to upload a local file (in the same format as the current unix file, but tab delimited) to the program for processing.
Requirements:
There are two transactions ZJPVCS303 and ZJPVCS303_US for one single Report.
->When ZJPVCS303 Transaction is executed, the file is uploaded from the Application
server to SAP R/3. The selection screen parameters would be:
Logical Filename:
Sales Organization:
Distribution Channel:
Division:
->When ZJPVCS303_US Transaction is executed, the file is uploaded from the Presentation Server
to SAP R/3. When this transaction is executed, it should not have the 'Logical
Filename' parameter anymore on the selection-screen. Instead it should only have
Local File name on the presentation server:
Sales Organization:
Distribution Channel:
Division:
    The same thing is applicable for the other transaction ZJPVCS303. When transaction ZJPVCS303
is executed, it should not have the 'Local Filename' parameter anymore on the selection-screen. Instead it should only have
Logical Filename:
Sales Organization:
Distribution Channel:
Division:
So how should I make these parameters invisible depending on the transaction codes execution.
I have an idea of using MODIF ID, LOOPING AT SCREEN...MODIFY SCREEN.
I have an idea of using SY-TCODE.
EX:
AT SELECTION-SCREEN OUTPUT.
IF SY-TCODE = 'ZJPVCS303'.
LOOP AT SCREEN.
IF SCREEN-GROUPID = 'GRP'.
   SCREEN-INPUT   = 0.
   SCREEN-INVISIBLE = 1.
   MODIFY SCREEN.
ENDIF.
ENDLOOP.
ELSEIF SY-TCODE = 'ZJPVCS303_US'.
LOOP AT SCREEN.
IF .....
ENDLOOP.
ENDIF.
ENDIF.
But I am not able to get the output which I require. Please help me out.

Hello Rani
Basically the transaction determines whether upload starts from application server (AS) or presentation server (PC). Thus, you will have the following parameter:
PARAMETERS:
p_as_fil          TYPE filename   MODIF ID unx, " e.g. Unix server
p_pc_fil          TYPE filename   MODIF ID wnd. " e.g. Windows PC
AT SELECTION-SCREEN OUTPUT.
CASE syst-tcode.
*   transaction(s) for upload from server (AS)
    WHEN 'ZJPVCS303.
      LOOP AT screen.
        IF ( screen-group1 = 'UNX' ).
          screen-input = 0.
          screen-invisible = 1.
          MODIFY screen.
        ENDIF.
      ENDLOOP.
*   transaction(s) for upload from local PC (PC)
    WHEN 'ZJPVCS303_US.
      LOOP AT screen.
        IF ( screen-group1 = 'WND' ).
          screen-input = 0.
          screen-invisible = 1.
          MODIFY screen.
        ENDIF.
      ENDLOOP.
   WHEN others.
   ENDCASE.
Regards
Uwe

How do I use my iPhone 5 as a router for my iPad?

How do I use my iPhone 5 as a router for my iPad?

Yep, as stedman has helpfully proffered a link on HowTo.
Once the personal hotspot is up, you can connect a reasonable number of devices to gain Internet access. The iPad can hook up either via Wi-Fi or Bluetooth. If you have a computer, you also have the choice of a wired connection as well.

Is it possible to be connected with a 3G modem for internet access and a WiFi router for printer sharing at the same time?

For our only internet access we have a 3G wireless modem. I have since purchased a WiFi printer and router to connect all the comptuters to in the house. The PCs have no problem with using both the 3G connection and the WiFi signal at the same time to print, however, the MacBook Pro will not connect to the 3G network and the router, it will drop the internet access from the modem and attempt to connect via WiFi (which has no internet access). Is there a solution that is available to remedy this? I attempted to create an adhoc printer network, however, the macbooks again will not print off of this, only the PCs. And I'm getting a bit frustrated overall with this.

The 3G wireless modem is on one of the PC's correct?
Why don't you pass the Internet through the Ethernet port to the router via Cat5 cable, then have that transmit a Wifi signal that everything else can use, then connect the printer to the router for print sharing?
You would have to turn off the wifi on the comptuer with the 3G modem as it's physically connected to the router and can't connect to the other machines as they are all connected to the router for sharing.
The Mac has the ability to pass, Internet Sharing in the System Preferences.
Do you have software for the Mac to run the 3G modem?

Entering mulitple values for a single user parameter

Hello,
Can anyone explain to me how to allow multiple values for a single parameter?
For example, say I want to allow the report to display a list of employees based on their employee id. I want to allow the user to enter mulitple
employee id's into a single field to get their report. SO the user would enter "241, 459, 832" to return the list of those 3 employees. I have the SQL set up below, but obviously I need to set up something different to break it out into 3 separate values. Any help would be greatly appreciated!
SELECT * FROM EMPLOYEE
WHERE EMPLOYEE_ID IN (:P_EMP_ID)

Hi,
Another way to do this is to use the lexical parameter, but then you have to create the parameter form in Forms. Your SQL would look like this for example:
select * from emp where empno is not null &empno
where &empno is a lexical parameter.
Then on your parameter form you would have a text field F_empid, say 200 character long, allowing the user to enter multiple values separated by a ",".
Then in the trigger that calls the report you would create a parameter list, and a variable that holds the values read from the form, this variable is where you define the value to be passed to the report's lexical parameter. For example:
declare
v_empid varchar2(200); (consistent with the length of the lexical parameter in the report).
begin
v_empid:='and empno in ('||F_empid||')';
then you pass v_empid to &empno in the call to the report.
This method works well. Good luck.

Routing for a single domaion

Similar Messages

Maybe you are looking for