Hi Guys,

Anyone (Craig?) have experience of using Port Address Translation and
BM3.8? My ISP is being very tight and wont let he have any new IP
addresses. Already have HTTP/HTTPS Proxy, WebAcc Reverse Proxy and
Static NAT for SMTP all on their own external IP Address. What would be
the best way to free up the IP I need for GMS?

Lofty.


--
lofty
------------------------------------------------------------------------
lofty's Profile: http://forums.novell.com/member.php?userid=7880
View this thread: http://forums.novell.com/showthread.php?t=332937

In article <lofty.3b5kon@no-mx.forums.novell.com>, Lofty wrote:
> What would be
> the best way to free up the IP I need for GMS?
>
GMS ... ? (GroupWise Mobile Server?)

As long as it doesn't require a port you are already using in a proxy,
you can just set up a generic proxy, add access rules and filter
exceptions, and there you go. You can use the primary public address
or a secondary, as long as it is not the same address being used for
static nat.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Thanks Craig,

I'll give it a go!


Lofty


--
lofty
------------------------------------------------------------------------
lofty's Profile: http://forums.novell.com/member.php?userid=7880
View this thread: http://forums.novell.com/showthread.php?t=332937

Be sure to look at Proxy Console menu, Option 19, then option 4, for
troubleshooting connectivity issues with generic tcp proxy.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Thanks Graig,

Couple of quick questions.

1. why use Generic TCP/UDP Proxy and not Mail Proxy?
2. I have a reverse proxy for webacc, could I use the same IP for smtp
mail to the gwia behind the BM server?


--
lofty
------------------------------------------------------------------------
lofty's Profile: http://forums.novell.com/member.php?userid=7880
View this thread: http://forums.novell.com/showthread.php?t=332937

In article <lofty.3b9e6o@no-mx.forums.novell.com>, Lofty wrote:
> 1. why use Generic TCP/UDP Proxy and not Mail Proxy?

Generic proxy is more reliable.

> 2. I have a reverse proxy for webacc, could I use the same IP for smtp
> mail to the gwia behind the BM server?

Yes.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Thanks Again Craig,

I decided that it would be less disruptive for us to move the WebAcc to
the SMTP IP Address (only a few users compared to loads of email). The
SMTP currently uses a secondary IP Address on the BM Server with a
Static NAT to the GWIA. The WebAcc is on the same server. Had trouble
setting up the Reverse Proxy for WebAcc using the SMTP IP, should this
work or do I have to use Static filters on Port 80 for the WebAcc?

Alternatively, should I change the Static Nat for the SMTP to use a
Generic TCP Proxy, then Add Reverse Proxy for the WebAcc?


Lofty.


--
lofty
------------------------------------------------------------------------
lofty's Profile: http://forums.novell.com/member.php?userid=7880
View this thread: http://forums.novell.com/showthread.php?t=332937

In article <lofty.3bi500@no-mx.forums.novell.com>, Lofty wrote:
> Had trouble
> setting up the Reverse Proxy for WebAcc using the SMTP IP, should this
> work or do I have to use Static filters on Port 80 for the WebAcc?

Do not mix static NAT and reverse proxy on the same public IP address.
>
> Alternatively, should I change the Static Nat for the SMTP to use a
> Generic TCP Proxy, then Add Reverse Proxy for the WebAcc?

Either keep both apps available via static NAT, or both via a proxy.
Either will work, though the config and filter exceptions are different.


Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***