Routing problem with Web Proxy Server SP5 on AIX

I downloaded Sun Java System Web Proxy Server 3.6 Service Pack 5 and loaded it onto an AIX v4.3.3 server. Everything is configured correctly, and the server and admin functions start clean.
This server has two interfaces. One is an INSIDE interface that points toward our network. The other is an OUTSIDE interface pointed toward the Internet. When a user uses the proxy server, he queries the INSIDE interface at port 8080. At that point, the proxy server should contact the destination web address using the OUTSIDE interface on port 80. However,
a firewall log shows that the request that should be coming from the OUTSIDE is really originating from the INSIDE.
My routing table looks OK, but I wanted to prove it. So on the proxy server, at command line, I ran a ping and traceroute to www.sun.com. The firewall log showed that the attempts were correctly coming from the OUTSIDE interface. Yet, at my PC, I try to go to the www.sun.com from a browser, and the log shows that it is coming from the INSIDE.
Does anyone know why the port 80 relays are going out the wrong way?
Thanks to all in advance.
Bill

This also happens on Solaris. Suspect they are performing raw IP connections - and not paying particular attention to the server routing tables.

Similar Messages

Intermittent proxy error "There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server "

Hi all,
From time to time (at least once a day), the following message pops up on the user's screen:
"There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server . Error Code 80000000)."
If we click "OK" it goes away and everything continues to work although sometimes Outlook disconnects. It is quite annoying...
Any ideas?
Thank you in advance

Hi,
For the security alert issue, I'd like to recommend you check the name in the alert windows, and confirm if the name is in your certificate.
Additionally, to narrow down the cause, when the Outlook client cannot connect again, I recommand you firstly check the connectivity by using Test E-mail AutoConfiguration. For more information, you can refe to the following article:
http://social.technet.microsoft.com/Forums/en-US/54bc6b17-9b60-46a4-9dad-584836d15a02/troubleshooting-and-introduction-for-exchange-20072010-autodiscover-details-about-test-email?forum=exchangesvrgeneral
Thanks,
Angela Shi
TechNet Community Support

There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"

Good day Guys
First of all I am not an Exchange Expert, and I might be asking a very stupid question, but please bare with me. :)
While I was on leave our Mail server fell over and The company got a Specialist to help out for the time being.
We where\are on Microsoft Exchange 2007 , which Fell over, and the specialist was able to recover as much data as he could.
They then installed Exchange 2013 and tried to migrate everything from 2007 to 2013 and not everything migrated over.
But the problem is, Outlook Anywhere was enable on 2007 and worked a 100% (before the disaster)
With Exchange 2013 I get the following error message when trying to connect With Outlook 2013, using an external connection:
"There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"
Outlook is unable to connect to the Proxy server. (Error Code 0)"
Has anyone had the Similar when migrating over from 2007 to 2013 or is this an Issue on IIS and nothing to do with Exchange migration?
Your assistance will be greatly appreciated.

Hi,
Firstly, I would suggest we use Exchange 2013 FE as the Outlook Anywhere proxy server.
For the certificate issue, it mostly occurs because the host name that Outlook are trying to access does not match the certificate SAN. Please check with this point. If they do not match, you
can change the host name by referring to the following article:
https://support.microsoft.com/kb/940726/en-us?wa=wsignin1.0
Thanks,
Simon Wu
TechNet Community Support

Version 3.6.6 and Internet explorer will not load sites, so I reloaded the older 3.6.3 of firefox and websites load fine. Internet Explorer still will not load. The error message corresponding with 3.6.6 was that there were problems with the proxy serve

Upgraded to 3.6.6 and no sites loaded, error in proxy server. Internet explorer will not load either. Reloaded firefox 3.6.3 and sites load fine, but internet explorer still will not load. I was only able to connect to yahoo messenger when websites were not loading.
== This happened ==
Every time Firefox opened
== I upgraded to 3.6.6

I have a problem with Firefox loading. It will not load and it says Firefox is using a proxy that refuses connection. Check with your network administrator. How do I get Firefox to work. I've uninstalled it and reinstalled it twice. Any help would be great thanks.

Outlook 2013: There is a problem with the proxy server's certificate

Hello!
One more question regarding Outlook 2013/Exchange2013SP1:
There are three lab PCs: DC, Exch1, Exchange2. There's a wildcard certificate installed on Exch1 (https://social.technet.microsoft.com/Forums/en-US/6a440c99-47bd-4f48-8cc5-9f92e6b06496/wildcard-certificate-for-exchange-2013?forum=exchangesvrgeneral).
OWA works perfect with this wildcard certificate.
I install Outlook2013 on Exch1 and get the error:
DC.Entreprise.Local is a computer certificate issued for the computer DC.Enterprise.Local.
DC.Enterprise.Local IS NOT (and never was) the proxy for Exch1 or Exchange2:
How Outlook could request DC's certificate if the proxy server = Exch1.Enterprise.Local???
Thank you in advance,
Michael

Hello all,
Thank you for your replies!
Since I'm using a wildcard certificate I changed Outlook providers according to this:
http://blogs.technet.com/b/exchange/archive/2013/08/02/part-2-reverse-proxy-for-exchange-server-2013-using-iis-arr.aspx
If you do choose to use a wildcard certificate, you should also make sure that you
change the EXPR Outlook Provider, so that Outlook Anywhere clients can successfully connect to the Exchange Server (this behavior can be a particular issue
if you have Windows XP clients). If you do not make this change then end users may continue to receive a prompt for a certificate mismatch."
...and EXCH and EXPR are both set to *.Enterprise.Local.
"I install Outlook2013 on Exch1" you mean you install Outlook on top of Exchange?" - on the same server as Exchange, and in this case Outlook must use SCP, not DNS (the server and the client are in the same AD domain).
"Without SCP, Exchange try DNS autodiscover lookup, first site it will try is
https://emaldomain/autodiscover/autodiscover.xml, which happen to be resolve to your domain controller." - I think that's the case... I just don't understand why
an internal client can't find the SCP that does exist and point to exch1.enterprise.local:
Regards,
Michael

There is a problem with the proxy server's security certificate (internal Outlook 2013 users)

I am receiving the above message for internal Outlook 2013 users when they open Outlook. Despite this message, Outlook is fully functional. External OA users do not see this message. We are using an SRV record for our autodiscover and pointing it to the
name on the single cert we have. I've also already changed the outlookprovider record in Exchange. Any ideas?
TIA!

Hi Alceryes,
According to the error message, Outlook is unable to connect to the proxy server (Error Code 10),
it seems an issue on the Certificate side.
FLAG_CERT_CN_INVALID 0x00000010
More details to see following KB:
http://support.microsoft.com/kb/923575
Would you like to tell me the reason that why you are using SRV record for Autodiscover?
I find a FAQ on Autodisocover for your reference, hope it is helpful:
https://social.technet.microsoft.com/Forums/office/en-US/54bc6b17-9b60-46a4-9dad-584836d15a02/troubleshooting-and-introduction-for-exchange-20072010-autodiscover-details-about-test-email?forum=exchangesvrgeneral
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

IPlanet Sun ONE Web Proxy Server 3.6 SP6 terminating

I have a problem with my proxy server server.
I use iPlanet Sun ONE Web Proxy Server 3.6 SP6
It is terminating and the service is restarting. This happens about 10-15 times a day. The message I get from the log is :
[22/Mar/2005:09:29:30] info: server terminating... each time it terminates.
I know for sure that this is no hardware issue (as I have changed the hard disk recently). My OS is win2000 server SP4 + all released patches from MS.
Also I have reinstalled the OS several times (clean install after format) and I got the same result.
Also I tried to use the proxy with/without LDAP server for authentication - the same.
Any suggestions/recommendations are mostly welcome.
Thanks in advance,
Kaloyan

Dear Kaloyan,
Migration to another proxy (e.g. ISA) seems to be quickest solution for your problem, as WebProxy doesn't work well on w2k platform.
Vladimir
P.S. Regards to Delyan :)

AP Extreme (WiFi Access Point)... LAN... Web Proxy Server help.

Hello...
I need a little help configuring this Airport Extreme as a Wireless Access point, serving a bunch of iPads via the schools LAN connection for which traffic is routed through a Web Proxy Server. I've been told to set it up as a bridge as the PC LAN and Proxy are providing NAT but can't seem to crack it.
The WiFi side of things is up and running, we can all see and connect to the AP.
I'm told that it was working fine before the school break in the summer, then something was changed and the position of the AP altered.
The Web Proxy Server is normally accesses from the PC's via the following address... IP > 10.12.14.122 // PORT > 3128
I'm not certain where the Proxy settings need to go in the new 'simple' Airport Utility, can't see a place for Port at all?!?
(I've taken the AP home, tried it on my home network and it works fine, so we know its all OK and its down to config).
Here are some screen images of the settings as they are, that do not work.
(I was trying a few different settings hence the screens like Static/DHCP etc.)
Any help is greatly appreciated.

Hi Daniel,
>>Now when I go on a client site my internet access on the host laptop is via a web proxy on a LAN connection.
"LAN connection" means physical NIC (Realtek PCIe GBE Family Controller) ?
" web proxy " means adding a proxy server IP in IE ?
Bounding the NIC (Realtek PCIe ) to external virtual switch then connect all VMs to that external virtual switch ,still can not access ?
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Safari cannot open the page ~ The error was: "There was a problem communicating with the web proxy server (HTTP)

Help! I was cruzing along just fine and went out tonight only to receive the message above:
Cannot open Page
Safari cannot open the page
The error was: "There was a problem communicating with the web proxy server (HTTP)."
I have had all the Apple iPhone phone. Have never encountered anything like this.
All systems are GO as soon as I log on to wifi.
Can anyone help, please.

I am also fixed. I also loaded Onavo, but that was the other day ... this is what I did with the help of online chat with AT&T ...
I went to:
Settings
Wifi
I selected the network I was working on by hitting the blue arrow located on right side
At the detail page of that network I scolled down to the bottom to find HTTP Proxy boxes
I was on Off and changed it to Auto and it worked!
I was soo jazzed!!
Instructions said if it was already on AUTO, to change it to Manual and make your Port = 80 but I didn't have to do that!
YIPPIE!! I'm a new man!!
Go to settings -----> WI-FI -----> select the network you're using ------> hit the blue arrow located on the right-side of the network name (ie: show details of that network), this takes you to another page.
--------> at the bottom of the page you'll see "HTTP Proxy" boxes (located below the "renew lease" button) ---------------> change the proxy to AUTO. Note: if you're already at AUTO, change it to "Manual" and make your Port = 80.

Problem: Protect Sun Web Proxy Server 4.0.5 with Policy Agent 2.2

We are trying to protect the Sun Web proxy Server 4.0.5 with policy agent 2.2 on solaris 10 machine.
We are using Access Manager 7.1 along with directory server 6.2
We are trying to protect the web proxy console url http://domain.example.com with that policy agent so that when we hit web proxy console url
it should through us access manager login page ie http://abc.com/amserver.
How can we achieve this.What all changes required in the AMAgent.properties file.Please suggest.

Hi subho,
problem is fixed. i have unistalled the policy agent and reinstalled it again. the problem i found is we didnt stop the webproxy instance when installing policy agent. Thanks for the reply

Why doesn't Web Proxy Server use default route?

After downloading Sun Java Web Proxy Server, I notice that the path to retrieve URLs from the internet does not go out the default route.
However my pings, traceroutes, telnets, etc. to the same URLs do go out to the default route correctly.
I have tried with both SP5 and SP6.
Thanks

I went to about:cache. It says 0 Kib offline cache.
I went to the two links, but I can't understand what to do. I know I have to allow some storage in order for the Flash based cams to run. I have the one I use the most set to allow 100 KB but is says there is 0 being used.
I'm attaching a few screen captures. There are many sites listed below where the last one is cut off. I don't even know what some of them are. I don't understand what to do. Sorry.
EDIT. I may have found the area that is causing the problem. See last screenshot of Website Storage Settings panel. For some reason, that is now on 0. I don't remember changing it to that or ever seeing this section before. Should I move it to some other number?
Another EDIT: I did move that slider over in the last screenshot, and I now have the cache and Clear works again. So you helped me solve this problem that was causing FF to crash all the time, I think. Thank you!
But now that I've seen that list of places storing things, I'm worrried about the ones I've never heard of and don't remember visiting. Is it a good idea to click Delete all sites or am I over-reacting to all this malware scare? Maybe I picked them up from Pinterest. I do have Sophos Antivirus running, so I don't think I have a problem at this time.

IE 6.0 seems not compatible with iplanet web proxy server 3.6

We have Iplanet Web Proxy Server V3.6 on AIX 4.3.3, and is trying to roll out IE browser V6.0. And is experience following problem:
When first try to access an ACL controlled URL, after enter user name and passwed, it would say "page cannot be found", and user has to click on "Refresh" botton, then it is OK. Subsequent access are all fine.
It seems to be a bug to me with proxy server. Currently, there are only SP2 for V3.6 available on the download site. However, from the release notes, it does not say it is fixing this specific problem.
Anyone can advise on this ?

I think this one is fixed in SP3. Can you try to upgrade and see if the problem still persists.

Sun Java Web Proxy Server Routing to another Proxy Server

hello every body
i have installed Sun java web proxy server and we are get internet services from anotyher proxy server.
how route SOCKS (Ports) to another proxy server)
I mean 8080 web browsing is ok but my socks applicaiton like outlook is not working. how to Route my Sun Java Web proxy Server Socks Server to another Proxy Server.
Please reply
best regards
Aamir Mughal
[email protected]

Dear ahmad@bzu,
I suspect that your download is corrupted. Check the file size ( for me it shows up 89,328KB(and the installation went smooth). So a possible solution should be to download again and try the installation.

Issue with Sun Java Web Proxy Server

I am using Sun Java Web Proxy Server to test my webservice in https mode.(SSL mode).When i test the webservice in http mode,its working fine,but when I test it in SSL mode ,it is giving the following error:
Unable to tunnel through localhost:8082. Proxy returns "HTTP/1.1 403 Proxy denies fulfilling the request"
When I am requesting the webservice using the following parameters:
a)-Dcom.yodlee.soap.services.url=https://localhost:1080/yodsoap/services
b)-Dyodlee.sdk.https.proxyHost=localhost
c)-Dyodlee.sdk.https.proxyPort=8082
d)-Dcom.yodlee.soap.client.http11Enabled=1
this parameters is used to set the client http connection to HTTP1.1 by setting the HTTP_TRANSPORT_VERSION.
Detailed error message is as follows:
Caused by: java.io.IOException: Unable to tunnel through localhost:8082. Proxy returns "HTTP/1.1 403 Proxy denies fulfilling the request"
     at org.apache.axis.AxisFault.makeFault(AxisFault.java:129)
     at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:131)
     at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:71)
     at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:150)
     at org.apache.axis.SimpleChain.invoke(SimpleChain.java:120)
     at org.apache.axis.client.AxisClient.invoke(AxisClient.java:180)
     at org.apache.axis.client.Call.invokeEngine(Call.java:2492)
     at org.apache.axis.client.Call.invoke(Call.java:2481)
     at org.apache.axis.client.Call.invoke(Call.java:2176)
     at org.apache.axis.client.Call.invoke(Call.java:2099)
     at org.apache.axis.client.Call.invoke(Call.java:1622)
     at com.yodlee.soap.core.login.CobrandLoginSoapBindingStub.loginCobrand(CobrandLoginSoapBindingStub.java:225)
     at com.yodlee.soap.core.login.CobrandLoginSoapClientProxy.loginCobrand(CobrandLoginSoapClientProxy.java:119)
     ... 1 more
Caused by: java.io.IOException: Unable to tunnel through localhost:8082. Proxy returns "HTTP/1.1 403 Proxy denies fulfilling the request"
     at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:197)
     at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:157)
     at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:114)
     ... 12 more
This error message shows that its not able to get the socket connection to the server.Can anyone tell me the reason of it.
If you need any more info do let me know.
Regards,
Somendra

First of all, is there a reason why you are using jRockit?
Since the issue appeared after upgrading the windows, the issue would potentially be in the interaction between JVM and OS.
Also, there were some issues related to memory leak that were fixed in AS 8.2.
May be you should try with a Sun JVM and AS 8.2.

Web Proxy Server 3.6 with Administration Server using SSL connection

In your manual: Administrator�s Guide Sun� ONE Web Proxy Server Version 3.6 SP3 for UNIX you wrote:
You should also make the administrative connection a mandatory SSL connection
Instead of using http://servername:port_number
I need to use:
https://servername:port_number
How can I do that?
Thanx
Gian Mario

HI
To enable https for the admin,
Create a certifcate for the proxy admin
Next, From 'Admin Preferences', click on 'Encryption on/off'
From the 'Encryption on/off'; screen that appears, click on the 'on' radio button. Select the certficate from the alias list and click on OK to enable encryption for the cerficate you have installed for your admin server.
Now restart you admin server.
You wil now be able to connect to your admin using https
Thanks
Nagendra HK

Routing problem with Web Proxy Server SP5 on AIX

Similar Messages

Maybe you are looking for