Ian,

My desk really isn't THAT far away is it?  Maybe I forgot to mention my
other title is 'resident firewall guru'. ;)  Now, enough of this silly
stuff... I'm all about helping other people out, so here's your answer:

The problem is related to the fact that the application is probably relying
on the client IP rather than a unique identifier.  All clients coming from
firewalls or proxies usually appear to have a single IP address to the
outside world and their true address is masked by NAT.  Thus multiple users
from behind a firewall appear as one session to the application, and session
data becomes shared for all those clients.

To workaround this problem, attach a unique identifier to the client through
a cookie or URL token.  Methods similar to this will insure firewall and
proxy clients maintain seperate sessions.

Ryan

Ryan Hill, MCSE
Director, Systems Integration
Market Matrix, Inc.
http://www.marketmatrix.com 

> -----Original Message-----
> From: Ian Lurie [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, April 11, 2000 3:21 PM
> To: '[EMAIL PROTECTED]'
> Subject: Firewall and shopping carts
> 
> 
> Hi all,
> 
> I'm apparently IP-impaired, and wanted to bounce this off some people.
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.

Reply via email to