Hi!
How is the "VPN" set up? Is it just a ssh
tunnel or is it a real VPN with routing etc..?
[Stankus, Paula
G]
SSH is allowed through the hosts.allow file in
Unix
1) check whether the url your users type in
is directed through proxy. And proxy server isn't aware of this VPN. In this
case disable the proxy or make it aware of vpn
[Stankus, Paula G] How would
I know this.
2) if no proxy is used, then ask your users just
to telnet to the url (for http://site.com they have to
telnet site.com 80, and see if they get an error. If not (the telnet seems
hanging, type GET / in it and see whether any html is returned). That way you
should at least isolate whether the problem is in browser or not)
[Stankus, Paula G] Can I
have them do a ssh http.site.com <portid> instead? Telnet is not
allowed at all.
3) if you are dealing with local ssh
tunnels, then you probably have to change your
c:\winnt\system32\drivers\etc\hosts accordingly (if using windows), to set
that the site.com where you want to connect, actually points to your own
machine (127.0.0.1) and ssh directs your connections to the right point from
there. I've used this mechanism for several customers support.
[Stankus, Paula G] If client
is coming from Texas and we are in Florida whose
c:\winnt\system32\drivers\etc\hosts file needs to be setup (9ias is
running under Unix) - we have localhost setup in our Unix host
file. Can you explain #3 in more detail or point me to a
document?
Thanks,
Paula
Tanel.
----- Original Message -----
Sent: Wednesday, August 27, 2003 11:29
PM
Subject: RE: VPN access to 9ias
instance behind firewall
Guys,
When user trys to run our application through a VPN behind
the firewall in a url they get an error. They can use ssh to get to
host where I installed the application server but not run the application
through their browser. Anyone deal with this issue before?
Thanks,
Paula
