topic Re: Virtualization server via firewall in Alfresco Archive

Virtualization server via firewall

loftux — Tue, 26 Feb 2008 11:33:03 GMT

Hi,I'm trying to get virtualisation to work behind a firewall.The setup is with both alfresco tomcat and virtulization server on the same machine (debian) with internal ip 192.168.100.100The virtualization server has been configured in alfresco-virtserver.propertiesto use the ip of firewall192-168-1

Re: Virtualization server via firewall

loftux — Tue, 26 Feb 2008 15:03:20 GMT

I added 192-168-10-10.ip.alfrescodemo.net to the /etc/hosts and now the above error message is gone.

Instead I have the problem with the company footer as in this thread http://forums.alfresco.com/viewtopic.php?t=10491
checked all that is suggested there, and all is on the correct places.

I also get this error in the error log
14:58:32,226 ERROR [org.alfresco.linkvalidation.LinkValidationServiceImpl] Error validating internal link: java.net.ConnectException Connection refused

I did check that the user and password is correct for the virtualization server.

/Peter

Re: Virtualization server via firewall

loftux — Fri, 29 Feb 2008 11:54:01 GMT

I tested to change the virtualization server in alfresco-virtserver.properties to reply with the internal ip, like 192-168-100-20.ip.alfrescodemo.net.

All error messages are then gone and creating new 'press releases' works. But then of course the problem is that the preview doesn't work for those outside the firewall, because it is an internal ip returned.

I've also tried opeing ports 50500, 50501 in the firewall as well with no success. Also tried with
iptables -t nat -A PREROUTING -d [External ip] -p tcp -m tcp –dport 50501 -j DNAT [internal ip] on the internal server to route the stuff back. tcpdump still shows that it tries to connect to firewall so maybe this was not how iptables should be configured.

Has anyone been able to use WCM and preview behind a firewall?
I can see the scenario were you need external reviewers to be able to preview, although most of the stuff is done internally within firewall.

Thanks for any help