Hello All, Just to follow up with some tested information: I've got a second DTU to my home for a weekend, a Sun Ray 2 with new firmware (for fixed server configuration).
I have a DI-624 Wireless Router (using copper ports now), and the two Sun Rays connect to our work servers. Sessions are disctinct, and my utselect framework does offer different functionality on the two displays ;) Obviously, just one is in "DMZ" configuration on DI-624, so this is not a relevant/required part of the setup. The server seems to be widely open on the corporate firewall for my public IP address at home, though. Tuesday, January 15, 2008, 10:27:43 AM, you wrote: JK> Hello Andreas, JK> Monday, January 14, 2008, 8:02:19 PM, you wrote: AH>> Hi Jim, >>> Just wondering and to make sure: do you have >>> several Sun Rays NAT'ed >>> by the same box? AH>> Yes, that's at least what we intend to do. >>> I also have a (single) Sun Ray at home, and >>> remember having problems >>> with connectivity until we played with the firewall >>> on the server side >>> (effectively allowing all traffic between server's >>> public IP and known >>> DTU IP addresses), AH>> You mean the one known public ipaddress that is AH>> assigned to the AH>> NAT-router on the client side or the internal AH>> ipaddress assigned to the AH>> DTUs by the NAT-Router? JK> Yes, I meant the provider's (static) IP-address assigned JK> to the NAT JK> router (client-side, near DTU). JK> We also have some other DTUs on external (city) LAN which JK> have their JK> "own" IP addresses, and they were also allowed on the JK> firewall. >>> and adding the DTU to DMZ on the home router (DLink >>> 624 if I remember correctly). >>> >>> After some of this voodoo with extreme insecurity >>> the Sun Ray worked >>> (I don't know if the firewall was tightened >>> afterwards, can check). >>> >>> My question on top is due to the fact that there >>> can be only one DMZ >>> host (at least on this DLink) AH>> In my LinkSys this the default value for the AH>> fourth digit is 0. Not AH>> sure whether this means that the complete internal AH>> network is in the AH>> DMZ or none. JK> AFAIU, the DMZ host (if configured) receives all incoming JK> packets for JK> "unknown" TCP/UDP ports, which are not configured for more JK> specific JK> redirection to another internal host. Maybe I am wrong JK> though. AH>> By the way, I still get 26D! JK> I guess this means your Sun Ray server session has been JK> set up and the JK> DTU received its settings from Dhcp. Now it waits for JK> graphics traffic. JK> Which it does not receive - either the X-Server is down, JK> see some other JK> threads on problems with dtlogin/cde-login, or the network JK> filtering JK> layer does not pass the packets from server to DTU (and JK> maybe back?). AH>> Regards, AH>> Andreas -- Best regards, Jim Klimov mailto:[EMAIL PROTECTED] _______________________________________________ SunRay-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/sunray-users
