We are using Powerschool for our school management and it is hosted on
Pearson's servers. We have no problems running everything from this program
accept when we import our schedule. When I unload ipflt, ipxflt and filtsrv
we still have the same problem. We are running Bordermanager 3.8SP4 on NW
6.5SP5. I also have Craigs most recent proxy.cfg loaded. How can I
diagnose what is causing the time-out when using this specific feature on
Powerschool?
Thanks,
Kathy

In article <aNB6k.618$g35.10@kovat.provo.novell.com>, Kathy wrote:
> I also have Craigs most recent proxy.cfg loaded. How can I
> diagnose what is causing the time-out when using this specific feature on
> Powerschool?
>
1. Unload ipflt
2. In your browser, disable proxy and see if things work then.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Yes, it does work with ipflt unloaded and the proxy disabled in the browser.
How can I fix it?
Thanks,
Kathy

"Craig Johnson" <craigsj@ix.netcom.com> wrote in message
news:VA.00003f3c.016f46b4@ix.netcom.com...
> In article <aNB6k.618$g35.10@kovat.provo.novell.com>, Kathy wrote:
>> I also have Craigs most recent proxy.cfg loaded. How can I
>> diagnose what is causing the time-out when using this specific feature on
>> Powerschool?
>>
> 1. Unload ipflt
> 2. In your browser, disable proxy and see if things work then.
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
>
>

In article <YT_6k.1006$g35.409@kovat.provo.novell.com>, Kathy wrote:
> Yes, it does work with ipflt unloaded and the proxy disabled in the browser.
> How can I fix it?
>
Still trying to find out what is wrong. My suspicions are being confirmed
that you have a proxy issue with the browser. Question will be how to fix.

Next step is to see if the browser is launching an application when you try to
use PowerSchool. Are there any other windows opening up when you go to the
app? If so, perhaps that app or applet has a proxy configuration option.

Another possibility is that you are using IE, and it may work if you go to
advanced settings and enable http 1.1 thru proxy. You might also need rev 30
of my proxy.cfg file (see tip #63 at the URL below). And some NWADMN32
settings might be remotely possible for this (persistent connections?)- I
leave them at default).

Ultimately, you may find this to be something that doesn't work through a
proxy, in which case you have to pursue a proxy-bypass method. This involves
a filter exception for the traffic, and a proxy bypass URL in the browsers.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

The browser does not launch an application when running the import. The
screen should just change to Import was successful, but instead we are
seeing the 504 time out.

Internet Explorer 7 already has the http1.1 thru proxy enabled.

I already have rev. 30 of your proxy.cfg installed.

I have persistent connections checked already.

I'm adding the powerschool url to the non-cachable URL patterns to see if
that will make a difference.

Is the proxy-bypass explained in your book? I'll look on Monday.

Thanks,
Kathy

"Craig Johnson" <craigsj@ix.netcom.com> wrote in message
news:VA.00003f45.04d41699@ix.netcom.com...
> In article <YT_6k.1006$g35.409@kovat.provo.novell.com>, Kathy wrote:
>> Yes, it does work with ipflt unloaded and the proxy disabled in the
>> browser.
>> How can I fix it?
>>
> Still trying to find out what is wrong. My suspicions are being confirmed
> that you have a proxy issue with the browser. Question will be how to
> fix.
>
> Next step is to see if the browser is launching an application when you
> try to
> use PowerSchool. Are there any other windows opening up when you go to
> the
> app? If so, perhaps that app or applet has a proxy configuration option.
>
> Another possibility is that you are using IE, and it may work if you go to
> advanced settings and enable http 1.1 thru proxy. You might also need rev
> 30
> of my proxy.cfg file (see tip #63 at the URL below). And some NWADMN32
> settings might be remotely possible for this (persistent connections?)- I
> leave them at default).
>
> Ultimately, you may find this to be something that doesn't work through a
> proxy, in which case you have to pursue a proxy-bypass method. This
> involves
> a filter exception for the traffic, and a proxy bypass URL in the
> browsers.
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
>
>

In article <0vc7k.1142$g35.868@kovat.provo.novell.com>, Kathy wrote:
> he proxy-bypass explained in your book? I'll look on Monday.
>
I think it might be mentioned in there.

Essentially, you have two parts. One is to put a bypass setting in the
browser (every browser you need to use for this url). The other is to
set up filter exceptions on the BMgr server to allow the non-proxied
traffic to the destination ip address.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Thanks Craig!

I set up the filter like this:

Source:Private
Destination:Public

Packet Type: www-http-st
Src addr Type: Host
Scr IP Address: [IP address of my computer]
Dest Addr Type: Host
Dest IP address: [IP address of our powerschool server]

It works! Is the filter set up properly so that no one else will be able to
bypass the proxy?

Thanks for your help.
Kathy



"Craig Johnson" <craigsj@ix.netcom.com> wrote in message
news:VA.00003f4c.012ef31d@ix.netcom.com...
> In article <0vc7k.1142$g35.868@kovat.provo.novell.com>, Kathy wrote:
>> he proxy-bypass explained in your book? I'll look on Monday.
>>
> I think it might be mentioned in there.
>
> Essentially, you have two parts. One is to put a bypass setting in the
> browser (every browser you need to use for this url). The other is to
> set up filter exceptions on the BMgr server to allow the non-proxied
> traffic to the destination ip address.
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
>
>

In article <92W7k.1710$g35.188@kovat.provo.novell.com>, Kathy wrote:
> Packet Type: www-http-st
> Src addr Type: Host
> Scr IP Address: [IP address of my computer]
> Dest Addr Type: Host
> Dest IP address: [IP address of our powerschool server]
>
> It works! Is the filter set up properly so that no one else will be able to
> bypass the proxy?
>
Yes, it is specific as to the source and dest. IP addresses, so only matching
packets will be allowed out (via this exception).

If others need to access Powerschool, you could remove the source IP address
restriction to make this more flexible.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Craig,
Thanks so much for your help with this. The PowerSchool support didn't have
a clue as to what to consider here.
Kathy




"Craig Johnson" <craigsj@ix.netcom.com> wrote in message
news:VA.00003f59.04a1c511@ix.netcom.com...
> In article <92W7k.1710$g35.188@kovat.provo.novell.com>, Kathy wrote:
>> Packet Type: www-http-st
>> Src addr Type: Host
>> Scr IP Address: [IP address of my computer]
>> Dest Addr Type: Host
>> Dest IP address: [IP address of our powerschool server]
>>
>> It works! Is the filter set up properly so that no one else will be able
>> to
>> bypass the proxy?
>>
> Yes, it is specific as to the source and dest. IP addresses, so only
> matching
> packets will be allowed out (via this exception).
>
> If others need to access Powerschool, you could remove the source IP
> address
> restriction to make this more flexible.
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
>
>