Re: WebTen behind a Firewall on a private IP address

[LAM <I.T@xxxxxxxxxxxx>]

> Hello,
>
> Is it possible to have WebTen behind a firewall, on a private IP 
> address and using "address translation" (or however it is called)?
>
> What ports are needed to be opened on the firewall (I think 80 and 
> 81 for HTTP, 84 for the admin server, and 21 for ftp)?
>
> Does anybody also know by chance whether I can use Timbuktu in such 
> a configuration to remotely control the Mac?
>
> Thank you, Christian.

Hi Christian,
I'm not sure I fully understand what you want to do and why.
There is something in your question that it is not clear to me.
I'm a beginner in this area of I.T. so my opinion is of little value, 
while you have long participated to the list yet:

Usually a company has its Public IP addresses that allow connection 
from the Internet to the Router
and its Server.  The Server is on a Public IP, so is the router.
Than you create your Private Network  and you use  N.A.T.  "address 
translation" .
Usually the router provides its own set of filters to built a 
firewall plus eventually software from other developers. It is again 
the router that, under your instructions associates the Public 
addresses to the private ones.
It is easier and secure.  But this you know already.

So if you need a PRIVATE Server with a Private Router on a Private 
network that has no contact to the already secured LAN why having an 
additional firewall? But you can still have it.
And if it has no contact to the outside via LAN, then the only secure 
way to access it, with or without Timbuktu is via a well protected 
modem connection on a private phone number known to almost no one.

OR
if you mean that you want to have the router understanding  that the 
Public IP address of the Server is 1_Public and that 1_Public 
corresponds to 1_Private so that all calls for 1_Public are 
translated to 1_Private this is possible, but it depends solely, as 
far as I know, from the possibilities that your router offers and has 
nothing or little to do with Webten itself. (With 2 Ethernet cards 
the server can answer to two different physical IP addresses)

Plus if your LAN is Mac OS based, you can separate TCP/IP and 
AppleTalk protocols so that TCP/IP is used for Web related 
applications and AppleTalk for local communications.  Your Macs 
(Server excluded) are then not accessible via TCP/IP.

Ciao
LAM


---------                    ----------
Tenon Intersystems' webten Mailing List
To unsubscribe: send mailto://webten-request@xxxxxxxxxxxxxxx
with the body: unsubscribe
Find searchable Mailing List archives at:
http://listsearch.blueworld.com/webtensearch.lasso