Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How to redirect 200.200.200.200:1000 to 192.168.0.100:1000

8 views
Skip to first unread message

HENRIQUE

unread,
Dec 22, 2003, 8:33:27 AM12/22/03
to
Hi, i'm going to explain...
I've a application (that manage some cameras and share the images) running
on a desktop wich IP address is 192.168.0.100 and when a access this IP in a
Web Browser from any other desktop into my Private Network everything works
fine, other way to gain access is using a client application where a inform
the IP 192.168.0.100 plus port :1000. The problem is when a try do the same
using the WAN, i mean acces out from my business using the internet. I've
Netware 6 for small business + Border MAnager NAT and proxy, i would like a
HOW to or some tips or documents wich help solve this problem. Thanks

--
OBRIGADO!

BRASINFO-Informática Ltda
João Henrique Moretti
Diretor Técnico-Comercial
hmor...@brasinfo.inf.br
bras...@terra.com.br


CSL

unread,
Dec 22, 2003, 11:48:06 AM12/22/03
to
hi Henrique,

> I've a application (that manage some cameras and share the images) running
> on a desktop wich IP address is 192.168.0.100 and when a access this IP in a
> Web Browser from any other desktop into my Private Network everything works
> fine, other way to gain access is using a client application where a inform
> the IP 192.168.0.100 plus port :1000. The problem is when a try do the same
> using the WAN, i mean acces out from my business using the internet. I've
> Netware 6 for small business + Border MAnager NAT and proxy, i would like a
> HOW to or some tips or documents wich help solve this problem. Thanks

You have two possible ways.
IF you only have one public IP address that you can assign to your
server (i.e. the one you already have in use), you can only configure a
generic TCP proxy (or UDP, depending on what protocol your application
uses), for the port 1000 on your public IP address associated to the
private IP address of your workstation.

If you have another public IP address in the same range of the existing
public IP address of your server you can add that IP address as a
secondary IP address, with the console command

ADD SECONDARY IPADDRESS 200.200.200.200

(make sure you add this command also to your autoexec.ncf, after the
line that loads the networking configuration).
Once you have this new public IP address associated to your server, you
can either enable static NAT between this secondary IP address and the
private IP address of your workstation, OR use again a generic proxy as
described above (but instead of using the primary IP address of the
server you'd use the secondary IPaddress).

LEt me know if you need further help on this.

--
Cat

Caterina Luppi
Novell Support Connection Volunteer Sysop

HENRIQUE

unread,
Dec 22, 2003, 12:43:07 PM12/22/03
to
Hi Caterina,

I have just one public IP address, and i try to configure the generic
TCP proxy using the BorderManager Setup in Detail's of Server (nwadmin32),
but it doesn't not work properly, maybe i forgot something or made some
mistake, what i did:
Nwadmin32 \ details of Server \ BorderManager Setup \ Generic TCP proxy \
enable the particular proxy \
Origen Server Hostname: put the IP of the machine wich has the cameras
(doesn't work, even with the name)
Origen Server Port: 1000 put the port where the application answer (at least
in a private test it work's with this port only with the client application,
because using a Web Brouser it doesn't answer if i type 192.168.0.99:1000 it
answer only if i type 192.168.0.100, the port is used with the IP in a
client that askme IP and Port user and Password)
Proxy IP address: mark the public IP (i also tried with the both at the same
time)
Proxy Port: 1000 (this port is the complement of the address of public IP
like 200.200.200.200:1000 (but in the Web browser even in the private
network if i put the IP plus the port it doesn't work, the IP plus the port
works only with the client application, using the browser i only get success
typing only the IP of the workstation wich has the cameras like
192.168.0.100 (this is relevant because if someone wish use a Web Browser
instead of the Application client, when He/She type the public IP + port
200.200.200.200:1000 needs to be redirect to the IP 192.168.0.100.).
I also unload ipflt.nlm to warranty there is no filter bothering the
process.
Thanks for attention, if you have a TIP or a Guide it will be Welcome.


"CSL" <c...@not-here.com> escreveu na mensagem
news:afFFb.2533$gu5...@prv-forum2.provo.novell.com...

CSL

unread,
Dec 22, 2003, 1:48:38 PM12/22/03
to
hi Henrique,

LEt's first try to have it working with the client application, then we
can work out the browser problem.

> Proxy IP address: mark the public IP (i also tried with the both at the same
> time)

Indeed, this should be the public IP of your server.

> Proxy Port: 1000

correct.

> Thanks for attention, if you have a TIP or a Guide it will be Welcome.

does the PC with the camera running have its default gateway configured
to be the private IP address of the NW server?
If you have access rules, does it help if you disabled them (temporarily)?

HENRIQUE

unread,
Dec 23, 2003, 7:00:29 AM12/23/03
to
how can i disable the rules, i have several one, and in the Origen Server
HostName what is correct the name or IP ?

"CSL" <c...@not-here.com> escreveu na mensagem

news:a0HFb.2699$gu5...@prv-forum2.provo.novell.com...

CSL

unread,
Dec 23, 2003, 8:48:07 AM12/23/03
to
hi HEnrique,

> how can i disable the rules, i have several one,

In NWadmn32, BM setup, BM access rules there is a checkbox with "enforce
access rules". If you uncheck that one, for the test, the rules will not
be enforced.
To be on the safe side, and avoid DNS resolution problems, put the IP
address for the origin server name.

Did you check the def. gateway of the PC?

HENRIQUE

unread,
Dec 23, 2003, 9:54:00 AM12/23/03
to
Yes, The Gateway is the Private of the server IP 192.168.0.1

"CSL" <c...@not-here.com> escreveu na mensagem

news:rIXFb.3222$gu5...@prv-forum2.provo.novell.com...

CSL

unread,
Dec 23, 2003, 10:10:34 AM12/23/03
to
Ok, let me know how the tests with the access rules disabled work.

Henrique

unread,
Dec 23, 2003, 1:41:56 PM12/23/03
to
HELP,

i changed the Origen Server Host Name to a name instead of a IP and the
system HANGS, after some trobleshooting i get the problem, when the
BRDSRV.NLM is loaded the Server HANGS with the message: DNS Host NAME
Resolution Failed (DNS ERROR 7) if i do that after load DNSServer
(named.nlm) so the system restrat instead of HANGS, i try put the hostname +
IP in the sys:etc\hosts but doesn´t work, i can´t change the Border Setup
configuration because in nwadmin says the border is not installed in the
server or has a problem. is ther a way to put the IP again without nwadmin
(other tool or cfg file)? i´m really into troble.

"CSL" <c...@not-here.com> escreveu na mensagem

news:KVYFb.3330$gu5....@prv-forum2.provo.novell.com...

Henrique

unread,
Dec 23, 2003, 1:58:18 PM12/23/03
to
it愀 OK, i put the information on the pxyhost file and it愀 working again.
i惴 going to do more tests and tell you the results

"Henrique" <hmor...@brasinfo.inf.br> escreveu na mensagem
news:U%%Fb.71$VM1...@prv-forum2.provo.novell.com...


> HELP,
>
> i changed the Origen Server Host Name to a name instead of a IP and
the
> system HANGS, after some trobleshooting i get the problem, when the
> BRDSRV.NLM is loaded the Server HANGS with the message: DNS Host NAME
> Resolution Failed (DNS ERROR 7) if i do that after load DNSServer
> (named.nlm) so the system restrat instead of HANGS, i try put the hostname
+

> IP in the sys:etc\hosts but doesn愒 work, i can愒 change the Border Setup


> configuration because in nwadmin says the border is not installed in the
> server or has a problem. is ther a way to put the IP again without nwadmin

> (other tool or cfg file)? i惴 really into troble.

CSL

unread,
Dec 23, 2003, 5:26:19 PM12/23/03
to
hi Henrique,

I'm not sure why you want the name there instead of the IP. You should
leave the IP, exactly to prevent these sort of problems.
Anyway, I suggest you start the BM server with the -NA option (i.e. you
don't execute the autoexec.ncf), edit the autoexec.ncf and comment out
the lines that load BM.
Then you can add the entry in the hosts file, but make sure that you
have an empty like after the last line of the file.

How did you edit the hosts file? (I mean, with which application)? I
wonder if it got corrupted. In that case the server wouldn't be able to
communicate with the NDS, giving you the errors about the BM server not
being installed.

CSL

unread,
Dec 23, 2003, 5:27:19 PM12/23/03
to

> it愀 OK, i put the information on the pxyhost file and it愀 working again.
> i惴 going to do more tests and tell you the results

The info in the pxyhosts file is transient. It will not be there
forever. It's a solution to get out of the troubles you were having, but
the name resolution should be done in the hosts file or, better, you
should use the IP address.

0 new messages