2006/11/6, Arno Lehmann <
[EMAIL PROTECTED]>:
Hi,
On 11/6/2006 8:58 AM, Matti Jormakka wrote:
> 2006/11/6, Ger Apeldoorn < [EMAIL PROTECTED]
> <mailto:[EMAIL PROTECTED]>>:
>
> > I believe it already does connect to router, since
> host.mydomain.com <http://host.mydomain.com> is
> > resolved as the public IP (given by ISP naturally) of our router.
>
> Ok, I didnt get that.. :)
>
> Then you should check for the firewall like Michael proposed. It
> might also be
> that the daemon is not running on host.
>
> You can telnet to the port in question to check if it works; much
> quicker than
> restarting your job every time.
> First check it on host itself; like 'telnet localhost 9103'
> If this works (you get 'connected to') you know the daemon is listening.
>
> Then try the same from another host on your network. If this works, the
> firewall settings are probably not bothering you. <- if you firewall
> based on
> the remote ip address, it will work from here, but not from the
> outside..
> Check that if you have problems.
One thing to note: If your internal DNS resolves host.mydomain.com
differently than external DNS this will not tell you much.
If internal DNS resolves host.mydomain.com to the external IP of your
port forwarding router, a test from the internal net will most probably
not work.
You have to try to connect from the outside, and IMO the only reliable
way to analyze these sort of problems is actually observing what the
router does with the packets it should forward.
> If that worked, try the same from the system outside your network.
> If this
> does not work; check if the port-forward is set correctly (to the
> right port
> on the right host)
>
> Ger.
>
>
> "Telnet localhost 9103" works but "telnet host.mydomain.com
> <http://host.mydomain.com> 9103" (which is then correctly resolved as
> the public IP) doesn't. There seems to be something wrong with the port
> forwarding. The port forwarding is set up for the sd in the following
> way in the router:
>
> Source IP/Mask: 0.0.0.0 <http://0.0.0.0 > / 0.0.0.0 <http://0.0.0.0>
What's that http stuff in this line? Does that indicate only traffic for
port 80 will be forwarded? In that case you'd have to either fix that,
or make sure your connection actually goes to port 80.
> Destination IP/Mask: 10.0.0.5 <http://10.0.0.5> / 255.255.255.255
> <http://255.255.255.255> ( 10.0.0.5 <http://10.0.0.5> is "host")
> Port Start/Port End/Port Map: 9103 / 9103 / 9103
> Protocol: TCP
If your router doesn't have the ability for detailed logging, mirroring
incoming packets, or running a packet sniffer software, this will be
difficult.
Anyway, I assume that a connect from an internal host to 10.0.0.5:9103
ends at the SD, right?
You should then run an external test and see how the router reacts to
that connection. If the router doesn't have the necessary tools, place a
packet sniffer on the network segments before and after the router and
watch for traffic for port 9103.
If your router only allows you certain ports to forwards (port 80, http,
probably) then I'd consider it broken ;-) The workaround would be to
make the FD connect to that port, of course.
Hope this helps,
Arno
--
IT-Service Lehmann [EMAIL PROTECTED]
Arno Lehmann http://www.its-lehmann.de
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
--
Matti Jormakka
mobile: +358 40 770 7243
e-mail: [EMAIL PROTECTED]
WWW: http://users.utu.fi/mjojor
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
