I am conjuring ghosts from a past life here.... so....I am not sure how
correct I am.... In other words I am probably full of stuff :)
I think your problem is TCP wrappers and/or lack thereof.
I willing to bet you that if you set up a VPN.... it would work like
gangbusters.
Mano.
Στις 11-04-2005, ημέρα Δευ, και ώρα 17:21 -0700, ο/η Mark Street έγραψε:
> I think I have an idea. Below is the output from my /tmp/gtmlog.txt file
> which logs all attempted connections to my server. Below we see my
> successful attempts along with unsuccessful attempts from Mano and my office.
>
> NOTE, the connections from Mano and my work are coming into the EXTERNAL
> interface of my Linux server which is public address space, my internal
> network is private 192.168.1.0/24.
>
> Note below on the connection from work how a connection is established with
> the public address of 66.224.30.98, no problem. Then when the line
> containing X=, XWBVER=1.108 we have the REAL PRIVATE address of my machine at
> work 192.168.100.145!!! Not masqueraded, different subnet..... hmmmmm. Why
> is my private address at work being used to make the TCPconnection when the
> masqueraded IP of my work makes the initial INbound connection to the server.
>
> First let's look at a successful connection log from my internal network.
> The
> server gets a connection from 192.168.1.3, establishes a connection
> TCPconnect on a high port 32862. No problem. Then a minute or so later we
> get an attempted connection from Mano in Greece. Note how his public IP
> makes the initial connection, then his private address 192.168.0.2 is used
> for the TCPconnect.
>
> There must be something in the client that is passing that INTERNAL PRIVATE
> address to the TCPConnect and messing everything up????? I have been using
> IP Masquerading and NAT for quite awhile now and I haven't seen anything like
> this before.
>
> So, fire up those Delphi IDE's and sift through the code. This client may be
> programmed to work only on one subnet. It grabs it's IP from its host and
> passes it to the server regardless of whether it is behind a NAT'd firewall
> or not. I don't know.... Someone with more brains than I can take a peek.
>
> Successful login from INternal network and failure from EXternal interface
> -----------------------
> APR 9,[EMAIL PROTECTED]:56:45 Got an inbound connection...
> XWBTDEV("KEY")="CONNECT|
> h11130730050|192.168.1.3"
> APR 9,[EMAIL PROTECTED]:56:45 LEN={XWB}00063|
> APR 9,[EMAIL PROTECTED]:56:45 X=, XWBVER=1.108, LEN=00051,
> MSG=TCPconnect^192.168.1.3^32862^localhost.localdomain^
> APR 9,[EMAIL PROTECTED]:56:45 Final
> MSG='TCPconnect^192.168.1.3^32862^localhost.localdomain^'
> APR 9,[EMAIL PROTECTED]:56:45 Entering 'callback' mode
> APR 9,[EMAIL PROTECTED]:56:45 Entering the loop: X ^%ZOSF("INTERRUPT")
> APR 9,[EMAIL PROTECTED]:56:45 About to listen for connection...
>
> APR 9,[EMAIL PROTECTED]:57:24 Got an inbound connection...
> XWBTDEV("KEY")="CONNECT|
> h11130730440|83.235.97.122"
> APR 9,[EMAIL PROTECTED]:57:24 LEN={XWB}00060|
> APR 9,[EMAIL PROTECTED]:57:24 X=, XWBVER=1.108, LEN=00048,
> MSG=TCPconnect^192.168.0.2^33560^mobile.geekdoc.org^
> APR 9,[EMAIL PROTECTED]:57:24 Final
> MSG='TCPconnect^192.168.0.2^33560^mobile.geekdoc.org^'
> APR 9,[EMAIL PROTECTED]:57:24 Entering 'callback' mode
> APR 9,[EMAIL PROTECTED]:57:24 Entering the loop: X ^%ZOSF("INTERRUPT")
> APR 9,[EMAIL PROTECTED]:57:24 About to listen for connection...
>
>
> Attempted connection from my work place on EXTERNAL interface
> ----------------------------------------
> APR 11,[EMAIL PROTECTED]:07:16 Got an inbound connection...
> XWBTDEV("KEY")="CONNECT|
> h1113 2392350|66.224.30.98"
> APR 11,[EMAIL PROTECTED]:07:16 LEN={XWB}00049|
> APR 11,[EMAIL PROTECTED]:07:16 X=, XWBVER=1.108, LEN=00037,
> MSG=TCPconnect^192.168.100.145^3020^dell^
> APR 11,[EMAIL PROTECTED]:07:16 Final
> MSG='TCPconnect^192.168.100.145^3020^dell^'
> APR 11,[EMAIL PROTECTED]:07:16 Entering 'callback' mode
> APR 11,[EMAIL PROTECTED]:07:16 Entering the loop: X ^%ZOSF("INTERRUPT")
> APR 11,[EMAIL PROTECTED]:07:16 About to listen for connection...
>
>
> APR 11,[EMAIL PROTECTED]:43:27 Got an inbound connection...
> XWBTDEV("KEY")="CONNECT|
> h1113 2414070|66.224.30.98"
> APR 11,[EMAIL PROTECTED]:43:27 Entering the loop: X ^%ZOSF("INTERRUPT")
> APR 11,[EMAIL PROTECTED]:43:27 About to listen for connection...
>
> APR 11,[EMAIL PROTECTED]:43:27 Got an inbound connection...
> XWBTDEV("KEY")="CONNECT|
> h1113 2414070|66.224.30.98"
> APR 11,[EMAIL PROTECTED]:43:27 LEN={XWB}00049|
> APR 11,[EMAIL PROTECTED]:43:27 X=, XWBVER=1.108, LEN=00037,
> MSG=TCPconnect^192.168.100.145^3083^dell^
> APR 11,[EMAIL PROTECTED]:43:27 Final
> MSG='TCPconnect^192.168.100.145^3083^dell^'
> APR 11,[EMAIL PROTECTED]:43:27 Entering 'callback' mode
> APR 11,[EMAIL PROTECTED]:43:27 Entering the loop: X ^%ZOSF("INTERRUPT")
> APR 11,[EMAIL PROTECTED]:43:27 About to listen for connection...
>
>
> On Monday 11 April 2005 14:58, Kevin Toppenberg wrote:
> > This sounds very much like the problem we were having
> > at the WorldVistA conference. I think we decided that
> > it was the old "CPRS can't connect through a
> > firewall/router problem." Supposedly newer versions
> > of CPRS have been modified to fix this problem. I had
> > a patch that specified a callback port--but I don't
> > think it ended up solving the problem either.
> >
> > > If I try to connect from outside my private network
> > > (my server has two
> > > interfaces, int. and ext.) I don't get a sucessful
> > > connection, I do get a
> > > file created XWBTCPL.mjo in vista's home dir the
> > > error message in the file
> > > states "HOME DEVICE DOES NOT EXIST IN THE DEVICE
> > > FILE".
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Hardhats-members mailing list
Hardhats-members@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/hardhats-members
