| Re: IDL on the Net (ION) [message #42017 is a reply to message #41978] |
Tue, 14 December 2004 13:37   |
Randy Shaughnessy
Messages: 2
Registered: December 2004
|
Junior Member |
|
|
<p.sommer@comcast.net> wrote in message
news:1102908938.797563.229670@c13g2000cwb.googlegroups.com.. .
>
> Randy Shaughnessy wrote:
>> Hi Folks,
>>
>> Not sure if this directly applies to this group?
>>
>> Has anyone had firewall problems reported from external users, when
> using
>> ION Java on their public web site?
>>
>>
>> Thanks,
>> Randy Shaughnessy
>
>
> Hi Randy,
>
> Is this a new problem, or have you just noticed the behavior? Is your
> ION Java Server behind, or outside a firewall? In short, ION Java
> communicates on a port that by default, is not typically open to
> internet clients sitting behind a firewall. However, if you start the
> ION Java Tunnel Broker server-side (assuming ION Server is outside
> firewall), ION Java should be able to tunnel through the client's
> firewall on port 80 -- typical web services port. The most efficient
> protocal is to open a port in the firewall that ION Java can use
> directly and avoid the Tunnel Broker. This is often doen on intranets
> where the network admin folks can exercise a greater level of control
> over both server and client.
> If I missed the mark, let me know.
>
> Thanks,
> -Paul
>
Hi Paul,
Thanks for responding.
I believed as you, that Tunnel Broker would work through port 80. In fact,
it just uses a different port (9085) and http code through that port. I set
up a test computer to simulate the problem seen by others. I blocked out
bound connections to port 7085 and 9085 on the server running ION and Tunnel
Broker. I also logged what was occurring and found that the client still
tries to reach port 7085 and/or 9085. One of the people having trouble with
the site was also able to open up port 7085 on their firewall and everything
worked.
There seems to be a lot of confusion at RSI with this. They do not even have
the means to simulate the problem. I find it hard to believe that this
problem has not been reported before. The reason we never saw it before is
that our firewall doesn't block this port, so all the tests we ran were
fine. Ours does not seem to be the standard. Most corporate firewalls block
non-standard ports including both 9085 and 7085. It is not very practical or
security conscious to expect these locations to open up these ports.
A simple test to tell whether or not your site is blocking these ports is to
go to the RSI site and test the examples pages. Of course, they do not have
Tunnel Broker running on their site, but either way it won't work if you
have, what I would consider, a reasonable firewall security set up.
I am working with a techie, but they do not seem to know their own product
very well at all. One e-mail said they will pass it on to the developers as
a feature request. I responded that this is a necessity and they are not
dealing with the real world if they think everyone should have those ports
open by default. I am still waiting.
Here is the link to the examples. I would be curious to know if others are
getting the "Unable to establish connection with ION Java server" message.
http://ion.researchsystems.com/IONJava/examples/basic.html
Thanks,
Randy
|
|
|
|
comp.lang.idl-pvwave archive
Members
Search
Help
Login
Home
