Networks

Ask something
Discussion Locked

PCAnywhere behind Netware 6

0 helpful
4 replies

by grbeckmeyer 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a couple customers with multiple IPs going through Netware Static NAT mapping to a PCAnywhere host on the network. This works, but the host PC's are wide open on the internet and I'd like to secure them. I tried following TID10024898 but then I could not access PCAnywhere or Netware remote management from internet, or browse internet from workstations. I know we could just install Zonealarm on the PC's, but I'd like to lock it down once at the server instead of configuring firewalls on multiple PC's. Also have the same situation with a Netware 4.11 server running Bordermanager, not sure which version, I think 3.0

4 replies

by grbeckmeyer

one mistake above, I WAS able to access PCAnywhere hosts on the internal network from the internet after enabling filters, but could NOT access Netware remote management, and internet access was blocked on the internal network.

by budthegrey

It sound like you weren't running IPFLT before locking down PCA. By default IPFLT doesn't let *anything* through -- you'll need to make filter exceptions for outgoing web requests (port 80), and for remote management (ports 8008 & 8009, I think). The most common types are pre-defined in FILTCFG, you just need to create the exception & reinitialize.

The BMgr 3.5 installer automatically set most common filter exceptions, I don't about earlier versions. Is the BorderManager server on a different network? If not, why isn't internet traffic going through it -- or do I misunderstand?

HTH

by grbeckmeyer

Never was able to get this going properly. Yes, Bordermanager 3.0 is on the same network, with 2 NICS so it was providing all internet access. Bordermanager started crashing, I believe due to some security breaches/SMTP relay traffic, so proxy has been disabled and customer will soon be getting a PIX to replace Bordermanager.

This discussion is closed to new replies.