Runninb Weblogic Server 6.1 behind NAT/firewall

My network has a router running NAT on it, with all the nodes on the LAN using
192.168.x.x addresses. One of them has Weblogic Server 6.1 running, which I would
like to make accessible from outside the LAN. I added a single rule to forward
port 7001 to the IP address of the machine running Weblogic. I can connect to
the server from other nodes on the LAN, but the forwarding doesn't seem to be
working. I can't even connect from a node on the LAN using the public IP. Any
suggestions would be appreciated. Thanks.

Check the following URL regarding firewalls :
http://e-docs.bea.com/wls/docs61//cluster/planning.html
Check your weblogic.log for error messages.

Similar Messages

How to make iCal Server work both behind a firewall and externally

I've got iCal server running with a DNS record pointing to the external IP of our server and the appropriate ports open in the firewall. This is working fine. However, I can't seem to figure out how to get it recognized on the internal LAN. I tried activating DNS on the server using example.com and the actual domain name that is being used externally, but neither seemed to help get the iCal server to be recognized internally. I know there is some (probably simple) step I am missing somewhere, but I have not been able to figure it out. I've been reading the server docs and haven't been able to pinpoint what I am missing so I'm hoping someone here might be able to explain to me what the necessary steps might be.
Please try to explain this as if you're speaking to someone who is really dumb, because that's how I feel right now.
Thanks!

So you have an external static public IP, a firewall NAT, and an internal static private IP, right?
This sounds like an IP routing issue, or a DNS issue, depending on how you want to deal with it.
Either tweak your local DNS to point to your local private IP for the iCal server directly and not to the external IP address, or configure your local IP network default gateway and IP routing to allow IP to route the external IP address request out and back in through the NAT again (which is where you're probably running off the rails here), or see if iCal will allow you go go after an internal network host name in your internal DNS with your internal private IP address, or (as a test) directly after the local iCal server by its private IP address.
A whole lot of Mac OS X Server really only works "right" if you have IP and DNS configured appropriately. (I was going to write "correctly" there, but there's usually no one "correct" configuration when dealing with IP networking.)

Server 2012 DC behind NAT

We have 2 sites, each with 2 domain controllers. The main site is with our servers in a hosted datacenter. We have an IPsec VPN tunnel setup between the sites, but the datacenter host does not add routes on their end for the tunnel. So the only way for servers
at the DC to communicate with the local DCs is using NAT with their static subnet.
I know this is not supported by MS. I found the following article, but only see it referenced for server 2003/8. I just wanted to verify this still works with server 2012 R2.
http://blogs.technet.com/b/ad/archive/2009/04/22/dcs-and-network-address-translation.aspx

I have configured NAT within AD and there would be no difference whether it be 2000, 2003, 2008 or 2012. In my instance I have to, to have two seperate DNS instances on each side of the NAT and when computer objects are added on one side or the other
I have to manually add them to keep them in sync. Not the an elegant solution but it works just fine.
To be honest I have no idea what your registry fix is about, I have never had to deal with it.
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security, BS CSci
2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup.
This posting is provided AS IS with no warranties, and confers no rights.
The problem with that is the DC will overwrite static DNS entries when it tries to register it's IPs. I have tried adding the IP, but if you go and run 'ipconfig /registerdns' on the machine, it will erase the static entry.

MapVewer Behind NAT

Hi,
I'm using MapViewer and I integrated it with my ADF application. I've generally no problem. I deployed both of them on weblogic server, and they work great. But when I want to have access to my app server (weblogic) from another place behind NAT, MapViewer doesn't work any longer!
My application page (ADF/JSP) works, but the map object (dvt:map) on my page, doesn't render! I think it causes by IP difference. Everything is the same, but just the IP changes behind the NAT.
Because of network back bone, we forced to have another Server IP in client side for Weblogic Server, instead of real Server IP. (e.g. real server IP is 172.18.10.1 but the client machine behind the NAT can see the server by 172.16.2.3)
I want to emphasize that all pages and all other features in my web applications works, and I can see and have access to MapViewer Server from client (behind the NAT) too. But my Map object (dvt:map) on my pages, doesn't render and just show a blank area without any error!
I know, I don't have any problem in accessing to MapViewer server, because I have access to my MapViewer server control panel from client side (behind the NAT) and MapViewer is installed on Weblogic which my Application is installed on. So, my question is if I can work with my application behind the NAT, why I can't see my map on it!

The key is that the NAT-enabled router is the one that will require port mapping/forwarding to be configured. In addition, you don't necessarily need for the Internet router to have a static IP address, but it MUST be a Public IP address. If your HOA controls this router, then most likely, they will NOT be willing to configure it to allow port mapping to your IP camera.

Connect Oracle 10g client to the Oracle 10g database behind a firewall

I need to connect an Oracle 10g client to the Oracle 10g database (windows server 2003 box) behind a firewall. I ran into this problem: Port redirection. Port redirection requires the Oracle client to connect to the database using a different port (usually a randomly selected TCP port) than the default or originally configured one. If there is no firewall between the server and the client, port redirection will not affect the actual connection. However, if port redirection does occur with the server behind a firewall, the client will be likely to suffer from a connectivity failure. The reason is simple: the newly assigned port based on port redirection is often blocked by the firewall. Such failures are not uncommon on Windows platforms.
I don't know how to stablished an unique TCP port.
I Enabled USE_SHARED_SOCKET on the Oracle database server, windows registry. Acording to what I read,that will force the server machine to share its port 1521 and thus all clients will stay on that port when connecting to the database. Noticeably, port redirection will not occur with USE_SHARED_SOCKET enabled, but that's true in oracle 8 or oracle 9. In oracle 10g this solution doesn't work.
I will apreciate any help about this. Please!
Thanks in advanced.

Three solutions in order of preference
1 Use Connection Manager on the server (only installed using a Custom Install). This will tunnel all traffic through a single port. It will also allow you to configure allowable nodes
2 Set up shared server to use a fixed port. Disadvantage: shared server has overhead and the number of connections is limited
3 Use shared_sockets. Disadvantage: when you stop the listener everyone is disconnected.
Sybrand Bakker
Senior Oracle DBA

Anyone have Weblogic Server 5.1 and Firewall-1 mix authentication problems?

We have a Weblogic Server 5.1 instance running behind Firewall-1 from
Checkpoint. When an external client tries to connect, the following
happens:
1. an authentication dialog box from Firewall-1 pops up and once it
authenticates the user, then
2. ANOTHER authenticatino dialog box pops up from WLS but it says it is a
combo of both WLS and Firewall-1???
Bizzarre!
Ideally, Just one popup should occur or people should be able to athenticate
once in FW1 and then secondly in ONLY WLS realm (not some hybrid)
Any ideas / suggestions
Bart Jenkins, CTO, Globeflow SA
Madrid Spain

Bart,
Could you please provide more details? For example, what is it that makes
you believe that it is a combo?
I ask because there is no integration between the two products. I would
have expected that FW-1 would
prompt because it is authenticating the user and then WLS would prompt via
basic or form-based authentication
if the resource is protected.
Paul Patrick
"Bart Jenkins" <[email protected]> wrote in message
news:3a75efb6$[email protected]..
We have a Weblogic Server 5.1 instance running behind Firewall-1 from
Checkpoint. When an external client tries to connect, the following
happens:
1. an authentication dialog box from Firewall-1 pops up and once it
authenticates the user, then
2. ANOTHER authenticatino dialog box pops up from WLS but it says it is a
combo of both WLS and Firewall-1???
Bizzarre!
Ideally, Just one popup should occur or people should be able toathenticate
once in FW1 and then secondly in ONLY WLS realm (not some hybrid)
Any ideas / suggestions
Bart Jenkins, CTO, Globeflow SA
Madrid Spain

WebLogic Server - Firewall between proxy and cluster causes errors

 Product Name and Version, including Service Pack (if any):
 =============================================
 Weblogic 5.1 , SP8
 Platform (OS Version)
 =================
 Windows 2000 server,
 JDK Version (if applicable)
 =====================
 Jdk1.2
 Detailed Problem Description
 ======================
 We have 2 weblogic servers in a cluser on two windows 2000 Servers
 , NT01 and NT02.The webservers are in a DMZ behind the firewall
 and there is a second firewall between the webserver and the weblogic
 servers.The webserver is a Linux box , running Apache 1.3.9 with
 the weblogic Plugin(LIN01).The per server weblogic.properties file
 has the weblogic.system.DNSName=LIN01.
 We still get errors on the console when we run our jsp/Servlet
 application.The errors are listed below.Could you please help us
 identify the problem
 Thanks,
 Gigen Thomas
 Error Message/Stack Trace
 =====================
 ed Mar 21 16:38:50 PST 2001: <ServletContext-General> Generated
 java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_driveway\_driveway.java
 Wed Mar 21 16:38:52 PST 2001: <ServletContext-General> Generated
 java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_driveway\_driveway_45_leftframe.java
 Wed Mar 21 16:39:41 PST 2001: <Cluster> Adding server -255280969513470611S192.168.6.12:[7001,7001,7002,7002,7001,-1]
 to cluster view
 Wed Mar 21 16:39:41 PST 2001:<E> <Kernel> ExecuteRequest failed.
 java.io.NotSerializableException: com.sun.mail.imap.IMAPStore
 at java.io.ObjectOutputStream.outputObject(ObjectOutputStream.java:845)
 at java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:342)
 at java.util.Hashtable.writeObject(Hashtable.java:738)
 at java.lang.reflect.Method.invoke(Native Method)
 at java.io.ObjectOutputStream.invokeObjectWriter(ObjectOutputStream.java:1585)
 at java.io.ObjectOutputStream.outputObject(ObjectOutputStream.java:907)
 at java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:342)
 at weblogic.common.internal.WLObjectOutputStreamBase.writeObject(WLObjectOutputStreamBase.java:118)
 at weblogic.servlet.internal.session.ReplicatedSession.writeExternal(ReplicatedSession.java:74)
 at weblogic.common.internal.WLObjectOutputStreamBase.writePublicSerializable(WLObjectOutputStreamBase.java,
 Compiled Code)
 at weblogic.common.internal.WLObjectOutputStreamBase.writeObjectBody(WLObjectOutputStreamBase.java,
 Compiled Code)
 at weblogic.common.internal.WLObjectOutputStreamBase.writeObject(WLObjectOutputStreamBase.java,
 Compiled Code)
 at weblogic.common.internal.WLObjectOutputStreamBase.writeObjectWL(WLObjectOutputStreamBase.java,
 Compiled Code)
 at weblogic.rmi.extensions.AbstractOutputStream2.writeObject(AbstractOutputStream2.java:82)
 at weblogic.rmi.extensions.AbstractOutputStream.writeObject(AbstractOutputStream.java:83)
 at weblogic.cluster.replication.ReplicationManager_WLStub.create(ReplicationManager_WLStub.java:86)
 at weblogic.cluster.replication.ReplicationManager.createSecondary(ReplicationManager.java,
 Compiled Code)
 at weblogic.cluster.replication.ReplicationManager.checkHosts(ReplicationManager.java,
 Compiled Code)
 at weblogic.cluster.replication.ReplicationManager.clusterMembersChanged(ReplicationManager.java:582)
 at weblogic.cluster.MemberStash$ClusterMembersChangeDeliverer.execute(MemberStash.java:207)
 at weblogic.kernel.ExecuteThread.run(ExecuteThread.java, Compiled
 Code)
 --------------- nested within: ------------------
 weblogic.rmi.MarshalException: error marshalling arguments
 - with nested exception:
 [java.io.NotSerializableException: com.sun.mail.imap.IMAPStore]
 at weblogic.cluster.replication.ReplicationManager_WLStub.create(ReplicationManager_WLStub.java:90)
 at weblogic.cluster.replication.ReplicationManager.createSecondary(ReplicationManager.java,
 Compiled Code)
 at weblogic.cluster.replication.ReplicationManager.checkHosts(ReplicationManager.java,
 Compiled Code)
 at weblogic.cluster.replication.ReplicationManager.clusterMembersChanged(ReplicationManager.java:582)
 at weblogic.cluster.MemberStash$ClusterMembersChangeDeliverer.execute(MemberStash.java:207)
 at weblogic.kernel.ExecuteThread.run(ExecuteThread.java, Compiled
 Code)
 --------------- nested within: ------------------
 weblogic.rmi.extensions.RemoteRuntimeException: Undeclared checked
 exception - with nested exception:
 [weblogic.rmi.MarshalException: error marshalling arguments
 - with nested exception:
 [java.io.NotSerializableException: com.sun.mail.imap.IMAPStore]]
 at weblogic.cluster.replication.ReplicationManager_WLStub.create(ReplicationManager_WLStub.java:108)
 at weblogic.cluster.replication.ReplicationManager.createSecondary(ReplicationManager.java,
 Compiled Code)
 at weblogic.cluster.replication.ReplicationManager.checkHosts(ReplicationManager.java,
 Compiled Code)
 at weblogic.cluster.replication.ReplicationManager.clusterMembersChanged(ReplicationManager.java:582)
 at weblogic.cluster.MemberStash$ClusterMembersChangeDeliverer.execute(MemberStash.java:207)
 at weblogic.kernel.ExecuteThread.run(ExecuteThread.java, Compiled
 Code)
 Wed Mar 21 16:40:12 PST 2001: <ServletContext-General> Generated
 java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_partner\_partner.java
 Wed Mar 21 16:40:14 PST 2001: <ServletContext-General> Generated
 java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_partner\_partner_45_mainframe.java
 Wed Mar 21 16:40:14 PST 2001: <ServletContext-General> Generated
 java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_partner\_partner_45_leftframe.java
 Wed Mar 21 16:43:41 PST 2001: <RJVM> Signaling peer -255280969513470611S192.168.6.12:[7001,7001,7002,7002,7001,-1]
 gone: weblogic.rjvm.PeerGoneException:
 - with nested exception:
 [java.net.SocketException: Connection reset by peer]
 Wed Mar 21 16:44:28 PST 2001: <ServletContext-General> Generated
 java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_dtlogout.java


 Thanks Prasad.Your comments are very much appreciated !!!
 Prasad Peddada <[email protected]> wrote:
 >This has nothing to do with firewall.
 >
 >
 >You have a non serializable object com.sun.mail.imap.IMAPStore
 >in session.
 >
 >You cannot have non serializable objects in sessions when
 >you are using inmemory replication/file/jdbc persistence.
 >
 >-- Prasad
 >
 >Gigen Thomas wrote:
 >
 >> Product Name and Version, including Service Pack (if
 >any):
 >> =============================================
 >> Weblogic 5.1 , SP8
 >>
 >> Platform (OS Version)
 >> =================
 >> Windows 2000 server,
 >>
 >> JDK Version (if applicable)
 >> =====================
 >> Jdk1.2
 >>
 >> Detailed Problem Description
 >> ======================
 >> We have 2 weblogic servers in a cluser on two windows
 >2000 Servers
 >> , NT01 and NT02.The webservers are in a DMZ behind the
 >firewall
 >> and there is a second firewall between the webserver
 >and the weblogic
 >> servers.The webserver is a Linux box , running Apache
 >1.3.9 with
 >> the weblogic Plugin(LIN01).The per server weblogic.properties
 >file
 >> has the weblogic.system.DNSName=LIN01.
 >>
 >> We still get errors on the console when we run our jsp/Servlet
 >> application.The errors are listed below.Could you please
 >help us
 >> identify the problem
 >>
 >> Thanks,
 >> Gigen Thomas
 >>
 >> Error Message/Stack Trace
 >> =====================
 >> ed Mar 21 16:38:50 PST 2001: <ServletContext-General>
 >Generated
 >> java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_driveway\_driveway.java
 >> Wed Mar 21 16:38:52 PST 2001: <ServletContext-General>
 >Generated
 >> java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_driveway\_driveway_45_leftframe.java
 >> Wed Mar 21 16:39:41 PST 2001: <Cluster> Adding server
 >-255280969513470611S192.168.6.12:[7001,7001,7002,7002,7001,-1]
 >> to cluster view
 >> Wed Mar 21 16:39:41 PST 2001:<E> <Kernel> ExecuteRequest
 >failed.
 >> java.io.NotSerializableException: com.sun.mail.imap.IMAPStore
 >> at java.io.ObjectOutputStream.outputObject(ObjectOutputStream.java:845)
 >> at java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:342)
 >> at java.util.Hashtable.writeObject(Hashtable.java:738)
 >> at java.lang.reflect.Method.invoke(Native Method)
 >> at java.io.ObjectOutputStream.invokeObjectWriter(ObjectOutputStream.java:1585)
 >> at java.io.ObjectOutputStream.outputObject(ObjectOutputStream.java:907)
 >> at java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:342)
 >> at weblogic.common.internal.WLObjectOutputStreamBase.writeObject(WLObjectOutputStreamBase.java:118)
 >> at weblogic.servlet.internal.session.ReplicatedSession.writeExternal(ReplicatedSession.java:74)
 >> at weblogic.common.internal.WLObjectOutputStreamBase.writePublicSerializable(WLObjectOutputStreamBase.java,
 >> Compiled Code)
 >> at weblogic.common.internal.WLObjectOutputStreamBase.writeObjectBody(WLObjectOutputStreamBase.java,
 >> Compiled Code)
 >> at weblogic.common.internal.WLObjectOutputStreamBase.writeObject(WLObjectOutputStreamBase.java,
 >> Compiled Code)
 >> at weblogic.common.internal.WLObjectOutputStreamBase.writeObjectWL(WLObjectOutputStreamBase.java,
 >> Compiled Code)
 >> at weblogic.rmi.extensions.AbstractOutputStream2.writeObject(AbstractOutputStream2.java:82)
 >> at weblogic.rmi.extensions.AbstractOutputStream.writeObject(AbstractOutputStream.java:83)
 >> at weblogic.cluster.replication.ReplicationManager_WLStub.create(ReplicationManager_WLStub.java:86)
 >> at weblogic.cluster.replication.ReplicationManager.createSecondary(ReplicationManager.java,
 >> Compiled Code)
 >> at weblogic.cluster.replication.ReplicationManager.checkHosts(ReplicationManager.java,
 >> Compiled Code)
 >> at weblogic.cluster.replication.ReplicationManager.clusterMembersChanged(ReplicationManager.java:582)
 >> at weblogic.cluster.MemberStash$ClusterMembersChangeDeliverer.execute(MemberStash.java:207)
 >> at weblogic.kernel.ExecuteThread.run(ExecuteThread.java,
 >Compiled
 >> Code)
 >>
 >> --------------- nested within: ------------------
 >> weblogic.rmi.MarshalException: error marshalling arguments
 >> - with nested exception:
 >> [java.io.NotSerializableException: com.sun.mail.imap.IMAPStore]
 >> at weblogic.cluster.replication.ReplicationManager_WLStub.create(ReplicationManager_WLStub.java:90)
 >> at weblogic.cluster.replication.ReplicationManager.createSecondary(ReplicationManager.java,
 >> Compiled Code)
 >> at weblogic.cluster.replication.ReplicationManager.checkHosts(ReplicationManager.java,
 >> Compiled Code)
 >> at weblogic.cluster.replication.ReplicationManager.clusterMembersChanged(ReplicationManager.java:582)
 >> at weblogic.cluster.MemberStash$ClusterMembersChangeDeliverer.execute(MemberStash.java:207)
 >> at weblogic.kernel.ExecuteThread.run(ExecuteThread.java,
 >Compiled
 >> Code)
 >> --------------- nested within: ------------------
 >> weblogic.rmi.extensions.RemoteRuntimeException: Undeclared
 >checked
 >> exception - with nested exception:
 >> [weblogic.rmi.MarshalException: error marshalling arguments
 >> - with nested exception:
 >> [java.io.NotSerializableException: com.sun.mail.imap.IMAPStore]]
 >> at weblogic.cluster.replication.ReplicationManager_WLStub.create(ReplicationManager_WLStub.java:108)
 >> at weblogic.cluster.replication.ReplicationManager.createSecondary(ReplicationManager.java,
 >> Compiled Code)
 >> at weblogic.cluster.replication.ReplicationManager.checkHosts(ReplicationManager.java,
 >> Compiled Code)
 >> at weblogic.cluster.replication.ReplicationManager.clusterMembersChanged(ReplicationManager.java:582)
 >> at weblogic.cluster.MemberStash$ClusterMembersChangeDeliverer.execute(MemberStash.java:207)
 >> at weblogic.kernel.ExecuteThread.run(ExecuteThread.java,
 >Compiled
 >> Code)
 >>
 >> Wed Mar 21 16:40:12 PST 2001: <ServletContext-General>
 >Generated
 >> java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_partner\_partner.java
 >> Wed Mar 21 16:40:14 PST 2001: <ServletContext-General>
 >Generated
 >> java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_partner\_partner_45_mainframe.java
 >> Wed Mar 21 16:40:14 PST 2001: <ServletContext-General>
 >Generated
 >> java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_partner\_partner_45_leftframe.java
 >> Wed Mar 21 16:43:41 PST 2001: <RJVM> Signaling peer
 >-255280969513470611S192.168.6.12:[7001,7001,7002,7002,7001,-1]
 >> gone: weblogic.rjvm.PeerGoneException:
 >> - with nested exception:
 >> [java.net.SocketException: Connection reset by peer]
 >> Wed Mar 21 16:44:28 PST 2001: <ServletContext-General>
 >Generated
 >> java file: E:\weblogic_cluster\FIPBEA01\classfiles\jsp_servlet\_dtlogout.java
 >

Calling WS from WebLogic server 8.1 that is behind a Proxy server

Hi,
I have a web application deployed on WebLogic server 8.1 sp1. And my server is
behind a http proxy server. Now one of the components in the application makes
a web service call to a service located external to the system, and it always
throws "java.net.UnknownHostException". I have set the Java system properties
http.proxyHost = my proxy server, http.proxySet = true and http.proxyPort = 80
and it still does not help.
If I try to evaluate the web service component as a stand alone client using WebLogic's
webserviceclient.jar, everything works fine. I can't figure what I have to do
to get this component working from within the WebLogic server. Can anybody provide
me with inputs, comments or suggestions.
Naveen.

Found solution. Followed Part 2 of the solution as explained in http://support.bea.com/application?namespace=askbea&origin=ask_bea_answer.jsp&event=link.view_answer_page_solution&answerpage=solution&page=wlw/S-19283.htm
What surprises me is that this solution to a common problem is hidden and hard
to find. If I am correct, no part of WLS 8.1 documentation suggests this. Rather
the doc says, set the system properties for the standard JDK 1.4 network properties
and it should work fine. If it is actually supposed to work like this, is it a
bug then?
"Naveen Kumar" <[email protected]> wrote:
>
Hi,
I have a web application deployed on WebLogic server 8.1 sp1. And my
server is
behind a http proxy server. Now one of the components in the application
makes
a web service call to a service located external to the system, and it
always
throws "java.net.UnknownHostException". I have set the Java system properties
http.proxyHost = my proxy server, http.proxySet = true and http.proxyPort
= 80
and it still does not help.
If I try to evaluate the web service component as a stand alone client
using WebLogic's
webserviceclient.jar, everything works fine. I can't figure what I have
to do
to get this component working from within the WebLogic server. Can anybody
provide
me with inputs, comments or suggestions.
Naveen.

Socks proxy call from a weblogic server across the firewall to an external program

Hi,
From our weblogic server, we are trying to connect to an external
program outside our firewall through SSL. The SSL connection is being
tunneled through a socks proxy in the DMZ. (We have not yet made it
work so far. Currently, we are trying to make it work)
From the weblogic bean, we are doing the following
System.setProperty("socksProxySet", "true");
System.setProperty("socksProxyHost", "w.x.y.z");
System.setProperty("socksProxyPort", "1080");
Not that weblogic bean is the initiator of the connection and it talks
to a program outside our firewall.
My question is, will this kind of system level setting in the weblogic
server have any negative impact? This is because, RMI is over sockets
and weblogic might be talking to its internal components through
sockets.
Is it advisable to have such socks related setting the weblogic bean
level?
thanks,
jas.

Hi,
From our weblogic server, we are trying to connect to an external
program outside our firewall through SSL. The SSL connection is being
tunneled through a socks proxy in the DMZ. (We have not yet made it
work so far. Currently, we are trying to make it work)
From the weblogic bean, we are doing the following
System.setProperty("socksProxySet", "true");
System.setProperty("socksProxyHost", "w.x.y.z");
System.setProperty("socksProxyPort", "1080");
Not that weblogic bean is the initiator of the connection and it talks
to a program outside our firewall.
My question is, will this kind of system level setting in the weblogic
server have any negative impact? This is because, RMI is over sockets
and weblogic might be talking to its internal components through
sockets.
Is it advisable to have such socks related setting the weblogic bean
level?
thanks,
jas.

Installing Iplanet web server and directory server behind a firewall

When installing iplanet web server and directory server behind a firewall - should the interal ip address be used or the external ip address?

Hello,
When you are installing iplanet web server behind a firewall,you should use the internal ip address in the firewall.
1. The external ip address connection to the Internet. The type of IP address used?dynamic (commonly used for standard
modems) or static (commonly used for cable modems) is dictated by the ISP to which you connect and the type of service it provides.
2. The internal ip adress connection. This connection must be a static IP assignment, and it must be assigned by you.
obviously it depends on the type of firewall setup you have.
Thanks
Selva

CUP server behind NAT

Would there be any problems in having a CUP server (IM & Presence) behind a NAT? A quick google indicates that XMPP isn't like SIP and is NAT friendly, but I wasn't sure if there are any gotchas. (The CUP server and it's CUCM partner are on the same subnet, so there's no issue with the presence SIP trunk between CUP & CUCM)
Thanks,
GTG

It may work, but the client is going to be only functioning half way. Take a look at the port mappings below. you will see that XMP will get you connected to the server, but then directory calls go right to LDAP, etc. You cant NAT LDAP requests.
The correct way to do this is to run Collaboration Edge (VCS Expressway) in your DMX to hand off the secure communications between the Jabber client and the rest of the UC servers. (CUCM, CUC, LDAP, etc).
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/port/9_0_1/CUCM_BK_T98E8963_00_tcp-port-usage-guide-90/CUCM_BK_T98E8963_00_tcp-port-usage-guide-90_chapter_010.html

Applying Patches to WebLogic Server 9.2

Can anyone help me out here.
I have an AIX platform (5.3) and have WebLogic 9.2 installed and want to apply the latest patches. However when I try to use the bsu command it obviously wants to run up the GUI, which we do not have access to due to an X windows server not running.
So therefore does anyone know how the patches can be applied. When loading WebLogic Server from start you can obviously use the java -jar filename -mode=console. Is there not anything like this to install patches. Since the machines are behind a firewall and are secure then I am unable to load anything like Exceed or Cygwin.

Simon Kearn <> wrote:
Can anyone help me out here.
I have an AIX platform (5.3) and have WebLogic 9.2 installed and want to
apply the latest patches. However when I try to use the bsu command it
obviously wants to run up the GUI, which we do not have access to due to
an X windows server not running.
So therefore does anyone know how the patches can be applied. When loading
WebLogic Server from start you can obviously use the java -jar filename
-mode=console. Is there not anything like this to install patches. Since
the machines are behind a firewall and are secure then I am unable to load
anything like Exceed or Cygwin.You need to use bsu to download the patches.
If you don't have access to the internet or can't use a gui, contact BEA
support which will send you the patch.
Then put this pach in the patch directory.
Note: You can download the patch on a windows workstation, and copy that jar
to the aix.
B
Schelstraete Bart
http://www.schelstraete.org
Linkedin: http://www.linkedin.com/in/bschelst

RMI, NAT firewall, and callbacks

Hi,
My problem is similar to many other problems that have been posted over the span of nearly a decade on this forum. However, I'm starting this thread because my search through the forum didn't make me happy, and because I hope that with new versions of Java new things might be possible.
My setting: the server has a public IP, a client is behind a NAT firewall. The client passes a Remote object to the server so that the server can call back the client some time later. This setting is nowadays very common in Internet: clients are run on ubiquitous home routers with NAT, and servers are available on public IP addresses.
One way to solve this problem is to instruct the server to use the TCP connection already established by the client when the server wants to call back the client. This way the NAT firewall will not block the server communication, because it will be part of the connection initiated by the client. So it looks like using a socket factory might be a solution.
Is the solution with socket factories possible?
Thanks,
Irek
Edited by: 893951 on 2011-10-31 04:44
Edited by: 893951 on 2011-10-31 04:52

EJP wrote:
the seconds one fails.Fails how?Well, the server can´t connect to client. That is, i have a server in 193.136.205.20 a a client in 193.136.205.20 (same host). The client connects to server and the server callback the client. I have another client in 193.136.205.128 and it connects do server too, but when the server callback this client, i have the exception "No connection to route host".
Is it because of firewall?Impossible to say until you tell us how it fails.
If i kill the firewall in both server and clients, does it work?I don't know, it's your firewall. Does it?
Or is there any solution, making the client as a server?A callback is a server.Yes, i understood that. I have expressed myself in a bad way. A callback is a server indeed. When i create the client callback object, i export it, creating the object and in the login method (existent in server) i send this object so the server adds it to a hashtable to callback later.
>
It sounds like a strange design. How come the client has the datase?, not the server? and why can't the client just push the database updates to the server? How can the server know when to callback the client to get more updates?Well, i have a local database for each client and a large database in server. I said the clients fetch database just as a example. The real deal is that a client fetches values from devices that measure energy values (electricity, gas, water, temperature, etc...). It fetches all connected devices in 5 minutes interval and saves values in the local database. 3 minutes after that synchronize, the server fetches all connected clients for all values from all proxys (clients). This is done using callback. It´s why i have this design. I thought on pushing values to the server. And it´s an idea that could be implemented. But this is how my company wants this testing project implemented...
However i have managed to correct this error. I have tried with another host 193.136.205.106 and it connected to server and the server could callback it. I then assumed that the host 193.136.205.128 had firewall permission problems. I solved this, creating the server registry in port 1099 and fixed the object port to 2000. Then, everytime i create a client, i fixed the export callback object in port 2004. I have set the permissions in both firewalls (server and clients) to accept connections in por 1099, 2000 and 2004 and it functions all correctly!! =)
Thanks for the help.

Can't access weblogic server from internet but can from intranet

Hopefully this isn't the wrong place to post but I've searched through many many
newsgroups to figure out where to post this but can't find a specific enough one.
I've recently run into a problem with my weblogic server in that it can not be
accessed from the internet now. This was all working several weeks ago, when
I had the wl server listening for SSL communications on port 7002. I could access
the server from both within our corporate intranet (kind of) as well as access
it from the internet. I say kind of for the intranet in that when I chose to
setup SSL on the the wl server, I couldn't get port 7002 to communicate through
our proxy server. After a little research I determined that it would be best
to communicate on the default SSL port of 443. After switching to 443, I didn't
need to bypass the proxy any longer, when accessing from within intranet, but
now couldn't access the server from the internet. The wl server is behind a firewall,
but I had the network administrators open up port 443 on the firewall. They ran
a network sniffer and determined that the wl server is sending a TCP FIN packet
immediately following the last ACK packet in a TCP session establishment. I don't
really understand what that all means, but it seems really strange that everything
works great when inside the intranet and I don't get any TCP FIN packets sent
from the server, but when you try to communcate through the firewall you do.
Does anyone have any insight into this issue? something else I could look at.
The network administrators are basically saying it's the webserver that needs
configuration (even though it worked great in the past when listening on port
7002 instead of 443). PLEASE HELP!!!

Got it. This thread helped!
Thanks!
https://discussions.apple.com/thread/3193444?tstart=60

ACE problem - bridge mode - behind a firewall

Hello
We are having problems with one of you ACE context, this implementation was done by a supplier and I am trying to troubleshoot it.
The clients and the servers are on different subnets, there is a Nokia firewall in the middle. The firewalls are setup on a cluster.
Connecting to port 7072 is taking at least 30 seconds. If I move the server into the VLAN in front of the ACE, the connection is instant. So it does indicate a problem on the ACE.
The client IP is .99.11.
The VIP is .100.62 and the server node is .100.12.
Running the capture command I can see the following behavior:
1. The client initiates the connection to the ACE Vip
2. At the same time it looks like a second connection is initiated from the client to the server node
Please see attachment.
Is this a normal situation where the connection is duplicated?
Does this interface setup look correct?
Is the bridge mode the correct setup in this scenario?
interface vlan 10
bridge-group 2
no normalization
mac-sticky enable
access-group input PERMITALL
service-policy input VLAN10-INTER-MMPM
no shutdown
interface vlan 15
bridge-group 2
no normalization
access-group input PERMITALL
no shutdown
interface bvi 2
ip address 192.168.100.7 255.255.255.192
alias 192.168.100.6 255.255.255.192
peer ip address 192.168.100.8 255.255.255.192
no shutdown
ip route 0.0.0.0 0.0.0.0 192.168.100.1
Many thanks,
Damian

Thanks for replying James,
I am sure I configured the capture only for VLAN10 which is in the VIP side.
But you are right, it looks like is showing both VLAN10 and VLAN15. So that is one of my theories out of the window! :)
This is a new installation, still on the testing stage. So it would be good time to make changes.
Do you normally implement a routed setup behind a firewall? Rather than a bridgedâ¦.
It is quite a small setup:
â¢ Traffic is coming from a separate local subnet
â¢ Traffic is not coming from the internet so it does not required a NAT
â¢ We need 1 VIP listening on two ports
â¢ The backend servers are four Linux boxes
Thanks again,
Damian

Runninb Weblogic Server 6.1 behind NAT/firewall

Similar Messages

Maybe you are looking for