Virtualization server via firewall

[loftux]

Hi,

I'm trying to get virtualisation to work behind a firewall.
The setup is with both alfresco tomcat and virtulization server on the same machine (debian) with internal ip 192.168.100.100
The virtualization server has been configured in alfresco-virtserver.properties
to use the ip of firewall
192-168-10-10.ip.alfrescodemo.net (this is not the real IP, I have a real working external IP)
Port forwarding on firewall works for both 8080 and 8180 to the internal ip.

I keep getting this error in the Alfresco.log (no errors in virtualization log)
09:34:56,101 ERROR [org.alfresco.mbeans.VirtServerRegistry] Could not connect to virtualization server: service:jmx:rmi://ignored/jndi/rmi://192-168-10-10.ip.alfrescodemo.net:50501/alfresco/jmxrmi

This to mee looks like it is Alfresco server connecting back to virtualization server trying to use the external ip.

After a restart (before it just said no webapp defined) with no config changes I can browse the virtual website using the preview functionality

Can I specify rmi to connect using another ip adress? Or would it be sufficient to just use an entry in /etc/hosts with 192-168-10-10.ip.alfrescodemo.net pointing to internal ip?

Thanks

Peter Löfgren

[loftux]

I added 192-168-10-10.ip.alfrescodemo.net to the /etc/hosts and now the above error message is gone.

Instead I have the problem with the company footer as in this thread http://forums.alfresco.com/viewtopic.php?t=10491
checked all that is suggested there, and all is on the correct places.

I also get this error in the error log
14:58:32,226 ERROR [org.alfresco.linkvalidation.LinkValidationServiceImpl] Error validating internal link: java.net.ConnectException Connection refused

I did check that the user and password is correct for the virtualization server.

/Peter

[loftux]

I tested to change the virtualization server in alfresco-virtserver.properties to reply with the internal ip, like 192-168-100-20.ip.alfrescodemo.net.

All error messages are then gone and creating new 'press releases' works. But then of course the problem is that the preview doesn't work for those outside the firewall, because it is an internal ip returned.

I've also tried opeing ports 50500, 50501 in the firewall as well with no success. Also tried with
iptables -t nat -A PREROUTING -d [External ip] -p tcp -m tcp –dport 50501 -j DNAT [internal ip] on the internal server to route the stuff back. tcpdump still shows that it tries to connect to firewall so maybe this was not how iptables should be configured.

Has anyone been able to use WCM and preview behind a firewall?
I can see the scenario were you need external reviewers to be able to preview, although most of the stuff is done internally within firewall.

Thanks for any help