Using Webstart behind a proxy firewall

Hi,
According to http://www.vamphq.com/jwsfaq.html#proxylogin if one uses Webstart behind a proxy firewall and one enters the wrong password, Webstart will not reprompt. Has this changed in Tiger or does this problem still occur? Does Webstart automatically import proxy settings from the browser in Webstart? To my understanding plain-application does not auto-import.
Please let me know.
Thanks,
Gili

If you have a Domina Name registered.Install IAS or OAS as your web server. Use NAT on your firewall to point to the illegal IP address. Make sure that there is a Domain Name Server somehwere on the Internet pointing to your Legal IP address for your domain name. If you don't have a domain name, you will still do everything the IAS/OAS setups, but you will have to type your Legal IP address into the browser to connect.

Similar Messages

Browsers slow/not working behind work proxy/firewall

Everything works great at home. At work, Exchange is fine, getting to local servers is fine, but using any browser is hit and miss. I get 20+mb download speed using speakeasy.net, but in another tab, web pages will not load/ partially load or take forever to load. At other times it works fine. Sometimes closing Safari and opening it up again will work for a few minutes, then problems. I have the same problem with Firefox and Chrome. The problem is the same with Ethernet and Airport.
Iv'e reset Safari, repaired permissions, but the problems still persist. At work, PC's and old Macbooks are using Safari flawlessly. I'm stumped as to why just my machine is having problems.

This sounds like it may be an entry with your employer's connection to the Internet where established links work fine but opening new links is slow - perhaps due to a slow DNS server.

How to get the remote user IP address if behind the proxy or firewall

Hi
How do i get the remote user Ip address who is invoking the servlet behind from a firewall.
When i use getRemoteHostAddr it gives the proxy ip address not the actuall user host address... Kindly let me know how to get the actual user ip address
satish

There is no reliable way to determine the original IP, and such information is not useful to you if the original IP is behind a firewall. What do you propose to use it for? There is probably an alternative way to do things that does not require the remote IP.

Using Flash's xml.sendAndLoad behind a proxy

We have a product that uses Directory and Flash to collect
data and then we send that data to a web server via a soap call. We
had been using an external perl script to do the soap call for many
years and are wanting to move the code in to Flash or Directory so
we can give the user better feed back about what is happening with
the soap call.
I created som flash scripts that use the XML object and the
sendAndLoad function to do the calls. The problem I am finding is
that if the client is behind a proxy the call fails. Is there a way
to fix this and correctly authenticate with the proxy server so
that the soap call goes through?

I don't know how you'd do this using a Flash object, but
Director's
built-in NetLingo xtra can handle SOAP requests as of version
10.1 and
this, in conjunction with the proxyServer() command, should
be all you
need - assuming you have access to proxy details.
<
http://www.adobe.com/devnet/director/articles/webservices.html>

Using SymChk behind proxy

My company has recently switched to a new environment where we are behind a proxy and on a new Windows 7 thin client.
When I issue a symchk command from the latest Windows Debugging Tools to get symbols from the symbol server, the following output is observed
We have since turned the proxy off the Microsoft symbols server address but still have the issue.
For some reason, we are getting "server name or address could not be resolved". One of the DNS names its not finding is called "Device" - does this need to be defined as something in our DNS?
Someone please advise on what I can try next.
H:\test\debugger_x86>SymChk.exe /im ../syms.txt /v /s srv*c:\symbols*http://msdl.microsoft.com/download/symbols
[SYMCHK] Downloading symbols in manifest H:\test\syms.txt from srv*c:\symbols*http://msdl.microsoft.com/download/symbols
DBGHELP: Symbol Search Path: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
SYMSRV: The server name or address could not be resolved
SYMSRV: The server name or address could not be resolved
SYMSRV: c:\symbols\NTOSKRNL.EXE\4047db831a5540\NTOSKRNL.EXE not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/NTOSKRNL.EXE/4047db831a5540/NTOSKRNL.EXE not found
SYMCHK: NTOSKRNL.EXE ERROR - Unable to download file. Error reported was 2

symsrv.dll may not be correctly getting your proxy value. Try explicitly setting it in the environment as described on msdn(dot)Microsoft(dot)com/en-us/library/windows/hardware/ff545465(v=vs.85).aspx
(Forgive the obtuseness, I'm not 'verified' enough to post an actual link.)

Configure FMS behind a proxy

Hello,
I've a problem to configure FMS Streaming 4.5 on an Ubuntu 10.04 Server.
I've got a website and a FMS on the same server who is behind a proxy (not on the same server)
Server IP : 192.168.0.2
Proxy IP : 192.168.0.254
FMS is configure to listen to port 1935 in fms.ini
# This section contains configurable parameters in Adaptor.xml #
# IP address and port(s) Flash Media Server should listen on
# For example:
# ADAPTOR.HOSTPORT = :1935,80
ADAPTOR.HOSTPORT = :1935
Apache listens on port 80
Apache wasn't installed with FMS, it's pre-installed
This is my Virtual conf
NameVirtualHost 192.168.0.2:80
<VirtualHost 192.168.0.2:80>
ServerName mydomain.com
DocumentRoot /var/www/html/
</VirtualHost>
Ports 80 1111 and 1935 are opened on my server
# RTMP Streaming
iptables -t filter -A INPUT -p tcp --dport 1935 -j ACCEPT
iptables -t filter -A INPUT -p udp --dport 1935 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 1111 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 1935 -j ACCEPT
iptables -t filter -A OUTPUT -p udp --dport 1935 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --dport 1111 -j ACCEPT
On the proxy server (use Apache), ports 80, 11, 1935 are opened in the firewall (output, input and forward) and the proxy makes a NAT translation to my website.
But I can't see the videos on my website
If i test on a machine behind the proxy, the streaming is OK, i see my videos.
I don't know how to solve this problem. I've got only one IP on my server.
What is the best solution,
Thanks for your help

Here is the flash tutorial:http://kb2.adobe.com/cps/408/kb408205.html
Without a proxy, it connect locally using the 1935 port.
I'm also able to connect from the external network to my local network using the same port. The firewall is configured to accept incoming rtmp connection
But as soon i use a proxy, the connection fail.

Is there a way to be able to activate our Adobe product while behind a proxy ?

This issue concern not only Captivate 6 but all our Adobe product Familly, wa are having hard time answering calls to our users asking to activate their software but being unable to do so.
The program won't acces the internet while behind a proxy (we are using a proxy pac), it is unacceptable to not be able to activate a software when behind a proxy.
Please advise.
Cyril Pineiro @ Natixis

Hello,
Well we already found that answer somewhere on a forum, I guess you mean add the URL to firewall exception,
but this doesn't fit Company Security Standard, in my company we cannot allow a computer access internet
directly exception or not, it is very sad that a company such as Adobe is not able to produce a tool that is
Proxy Aware for all it's functions (Software activation, Software Serial Checking etc. all doesn't behave the same way).
We need a solution ASAP as many of our users are not able to use their Adobe Softwares.
Cyril Pineiro @ Natixis

Another port question - multiple Macs behind the same firewall

I've searched for this issue, but I can't seem to find a topic directly on point. I know how to forward the right points for this to work, but...
I'm coming from outside the network, and I need to control multiple machines that are behind the same firewall. I can't forward a port to more than one machine. How do I control all these machines?

To be able to connect to a workstation from outside it's network, the ports that ARD uses must be open on both ends of the connection. ARD uses ports 3293 and 5900 so those must be open.
If your workstations get their addresses from an NAT device rather than being "real", as seems to be the case from your description, the ports also need to be forwarded in the router to the workstation's internal IP address. ARD uses port 3283 for the reporting and updating function, so if your Macs are getting their IP addresses through NAT, since you can only forward a port to a single workstation, you can only get reports, push package/files to etc. for a single workstation.
ARD uses the VNC protocol for observation and control, though, and there are a range of IP addresses for that protocol, starting with 5900. ARD uses 5900 by default, so that port would be forwarded to the first workstation. You would, I believe, need to install VNC servers on the systems (since the ARD client cannot listen on any port other than 5900 while VNC servers can be set for other ports such as 5901, 5902, etc. You would then forward 5901 to the second workstation (and on to 5902, 5903, etc.). You can then use the following information:
Remote Desktop 2: How to specify a port number for a VNC client
to connect.
Hope this helps.
Forum Tip: Since you're new here, you've probably not discovered the Search feature available on every Discussions page, but next time, it might save you time (and everyone else from having to answer the same question multiple times) if you search a couple of ways for a topic before you post a question.
Regards.
Message was edited by: Dave Sawyer

Can't get Firefox to work properly behind corporate proxy

I am forced to use Firefox behind our corporate proxy and have to continually make exceptions just to get to sites, but even this doesn't always work. I don't know much about certificates, but I know certificates are issued by our organization for each user and device. I've tried exporting the personal certificate from IE and importing it into Firefox without success (couldn't export certificate completely and in correct format for Firefox) and am not sure if I'm even taking the right approach. IE is our only approved browser and I'm sure part of the reason is that proxy settings can be forced via group policy. I've tried adding a certificate exception to Firefox for our proxy, but Firefox is "Unable to obtain identification for this site". Is there any way to get Firefox to function correctly in this environment or somehow get Firefox to work through IE?

I think most proxies work the same way: they generate a fake certificate for the website and present that to your browser so they can decrypt and inspect the traffic between you and the site. It's a hassle having to make exceptions for the individual fake certificates -- it's more efficient to recognize the certificate the proxy uses to ''sign'' the fake certificates as a valid certificate authority.
The trick is identifying that certificate. It might be easiest to do from IE or Chrome, since both use the Windows certificate store (Firefox uses its own). By inspecting the certificate for a secure site and the certificate used to sign it, you may be able to identify and export that certificate (DER or .cer format).
In Firefox, you would import that into the Authorities section of the Certificates dialog:
"3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button > Authorities mini-tab > "Import..." button
Of course, it probably is safest to verify with your IT that you've found and exported the correct certificate before importing it into Firefox.

Creating a socket behind a proxy server

How can I create a socket to a server if the client is behind a proxy server? I know java.net's HTTP-related classes have built-in proxy server support but this is not for a HTTP-based application.

Hi,
I also need to do this but not found any way yet. Somewhere I read that we can set the socket proxies (because mine was an application which tries to open socket connection over the network) through command line or by setting the system properties "socksProxyHost=<proxy_host_address>" and "socksPoxyPort=<proxy_port>". I tried to solve my proxy issue this way but all invain. While setting these system properties it is required that your proxy server is using the SOCKS service which I think is mostly the case but it still didn't work for me. You people try and c if it works for you. If anyhow you manage to get this issue resolved then please tell me also by posting a message.
regards

Lync Client Behind A Proxy

Can anyone confirm if the Lync client can be configured to route traffic via a proxy, or to use the proxy settings defined in IE?
I have the following scenario...
The environment is heavily locked down, and PC's only have access to the Internet via a defined IE proxy. Internal IM, presence and communication all work fine. We have configured federation with some remote organizations. IM and presence
works fine to these orgs, but when any A/V or application sharing is attempted, the media fails. I can see from traces this is when the client tries (and fails) to access the A/V edge of the remote federated parties edge server.
I've looked at the Lync settings, reg settings, group policy ADM and documentation, and cant find anything to a) confirm if this behavior is correct or b) any way to work around it.
There must be other Lync implementations in hardened environments like this. Opening up outbound ports is out of the question, so what other options do i have?
Dave

Jay, you missed the key word in my last post "internally". Functionally, everything about the edge server is working fine. Clients can login internally and externally. Media flows from internal to external clients is fine. All SIP/AV/WEBCON
DNS entries are fine in public DNS along with supporting SRV records. These interfaces are Nat'd and the AV address is correctly assigned.
My problem only occurs when an AV session is attempted with a federated partner...
When any AV or sharing is attempted, from the internal network, to the federated partner, i can see the Lync client attempting to make connections out to the remote federated partners AV edge (something which it will never be able to do as it's behind a
proxy with no direct Internet access). This is what I'm trying to address.
Should the SIP/AV/WEBCON address exist INTERNALLY
on the corporate DNS servers for internal clients to resolve? Is this what i have missed?
Is there anyway to instruct the Lync client to route traffic bound for the Internet via a proxy?
Surely there must be someone else with this scenario in a locked down environment?

Problems with Arrowpoint cookies for clients behind a Proxy

I have in a WebSite clients being load balanced using Arrowpoint cookies to a virtual Server. The CSS load balance between three Apache real servers.
I have some clients that are behind some kind of Proxy Cache and I have seen with a sniffer that the proxies causing the problem Re-use proxy to our server connections for different requests for multiple clients.
Then, as I understand the CSS make the forwarding decission based on the cookie of the first request for the first client behind the proxy after establishing the HTTP connection, but when there is a request from other client using this same connection (that must be forwarded to other real server) the request is forwarded to the original web server and fails because we need sticky connections.
I thought that this wasn't correct but I have read some documents that say that this is called a Proxy role as a "connection cache". Then my question is if there is any workaround for this problem.
Thanks

I believe your problem is that the proxy open a few persistent connections with the CSS and loadbalance your client's request over them.
Once the CSS has associated a connection with a service, it does not look into the request anymore.
The solution is to disable persistence on the CSS with the command 'no persistent' and 'persistence reset'.
Find more info at :
http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a0080093e06.shtml#crp
Gilles.

Wget and edelivery behind a proxy?

Is it possible to use wget to download files on edelivery? And if so does being behind a proxy server change that answer?
I am behind a proxy and am able to download regular patches on MOS via a wget script.
I have founds some posts discussing this topic (minus the proxy) and Steve S's response to this post summarizes the steps I took to export cookies.txt etc.
Solaris 10 Update 10?
I have substituted the link location to use \& instead of & in the link location as shown here (my real email is altered for the example).
# This is not working - edelivery downloads
$WGET --user-agent="Mozilla/5.0" --load-cookies=$COOKIE_FILE --save-cookies=$COOKIE_FILE --keep-session-cookies "https://edelivery.oracle.com/EPD/Download/process_download/V35215-01_1of3.zip?file_id=64844077\&aru=15611521\&userid=849998\&egroup_aru_number=16809533\&email=[email protected]\&country_id=124\&patch_file=V35215-01_1of3.zip&email=[email protected]\&country_id=124\&patch_file=V35215-01_1of3.zip" -O $OUTPUT_DIR/V35215-01_1of3.zip >> $LOGFILE 2>&1
It does seem to go through the motions but my file seems to be finished after only downloading 44k.
Tail end of log file:
Proxy request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `./V35215-01_1of3.zip'
0K .......... .......... .......... .......... ... 1.62M=0.03s
2013-09-26 11:19:07 (1.62 MB/s) - `./V35215-01_1of3.zip' saved [44729]
Anyone been through this?
Message was edited by: user6445925
I'm going to close this call and create an SR.

Contact your ISP for instructions on how to obtain a direct connection.

Windows Messaging+ App behind a proxy

What is the URL for the web service for the Windows Messaging+ app? Im behind a proxy and it always fails to connect. There is no option under settings for defining a proxy.

Verizon Wireless Customer Support wrote:
... Since the error is only happening at work, it sounds like something on your work's network that is causing this error. ...
Yes, Greg said
Other applications such as Spotify, Dropbox,
etc. work only when I configure them to use a specific proxy server. The
Message+ desktop application doesn't seem to allow the user to specify a
proxy server anywhere in the settings.
All he's asking is if the desktop app has an option to set for a proxy server or a way to workaround it....

Sudo pacman behind a proxy...

I've installed arch on a pc which is behind a proxy. No problem after using
export http_proxy=...
the point is that if I enter the system as root (or su) I can use pacman but, if I give a sudo pacman (as a user) I can not access the network.
Sudo works fine, the problem is that I can not manage the proxy as a simple user...as a SU everuthing is fine
I've also repated the export http(ftp)_proxy command as a user but without success

plutus wrote:
I've installed arch on a pc which is behind a proxy. No problem after using
export http_proxy=...
the point is that if I enter the system as root (or su) I can use pacman but, if I give a sudo pacman (as a user) I can not access the network.
Sudo works fine, the problem is that I can not manage the proxy as a simple user...as a SU everuthing is fine
I've also repated the export http(ftp)_proxy command as a user but without success
Yay, Thank you, you gave me the right clue..
I had configured a non existent proxy that I used some time ago in my bashrc...
Its always about the trivial things ^^"
Last edited by vidar (2010-08-24 19:10:23)

Using Webstart behind a proxy firewall

Similar Messages

Maybe you are looking for