Networking :: Iptables Or Reverse Proxy For Oracle Database?
Feb 15, 2010
I'm trying to access my oracle database (port 1521) from the outside.What I have:Outside -----> Proxy ----> DatabaseWhat I try is to configure a reverse proxy or iptables for accepting connections on port 1521 and transfer them to database. Only one computer of the outside will have access to the database.I suppose than this can be done with iptables or another way.In the real environment proxy will have two nicut for test purposes my computer will have only one (for test purposes, the tree computer will be in the same net)
View 11 Replies
ADVERTISEMENT
Mar 4, 2010
I'm trying to configure a reverse proxy for Oracle Database connections. What I have:
Host outside --> Reverse proxy --> Oracle Database
The "Revese proxy" has two IP, one for local and another for outside.I've tried with iptables, but unable.Now I'm trying with "redir".When I do a tnsping database, it works and says OK. But executing sqlplus user/pass@database, it tries to connect but time later I receive a timeout. What i do is a redir from port 1521 in "Reverse proxy" to 1521 in "Oracle database" why this doesn't work or any other way to do it?
View 1 Replies
View Related
Apr 14, 2010
I installed apache2 and mysql database on a Debian system. It is using reverse proxy on apache to redirect requests to apache2 running on any machine which is on Xen server as a Virtual host. I tried to install Drupal on it. Every thing went fine till I pointed my browser to:
http://IP[/url] of LAN where Drupal was installed/drupal
then I see an installation page of Drupal which welcomes me. I click install in English then it can not proceed to connect with database. Database configuration: Your web server does not appear to support any common database types. Check with your hosting provider to see if they offer any databases that Drupal supports.
I have created a database and username for Drupal separately. What should I check to. There is one more error
http://Public IP/some location/
Is showing me contents of Document Root but there is a folder named drupal on it. When I click on it I get error. Not Found. The requested URL /drupal/ was not found on this server. Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny8 with Suhosin-Patch proxy_html/3.0.0 Server at
What things should I check in for? I am also getting errors like:
- Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName on individual DomU's what should I check in. and on Dom0 when restarting apache2 I get following error.
- Reloading web server config: apache2apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
[Wed Apr 14 15:23:05 2010] [warn] NameVirtualHost *:80 has no VirtualHosts
View 1 Replies
View Related
Jan 18, 2011
I have an enormous quadcore machine with 16gb ram and dual gigabit NICs. It used to be for MySQL but we have upgraded the whole database infrastructure so now this server is left floating. I had the great idea of turning this into a reverse-proxy (using apache mod_proxy) and it really handles a ton of requests. But I have a feeling that we are not getting the most use out of what it can offer.
Our traffic consists of a few thousand very small (less than 10 byte) ajax calls per second, and frequently I find we are running out of kernel allocated network stack to handle all the requests. Often we get the kern.log warning "possible SYN flooding on port 80. Sending cookies." and other things like this. Obviously we are not getting SYN flooded, we just have very high demand.
So far I have found a few kernel tuning guides to tell the kernel to allocate more of the base system memory for networking but every guide I have found has been for the purpose of increasing the performance between WAN links (direct backbones between offices etc) and usually with very large file sizes being the priority. One such example (and great) write up is here:
cyberciti.biz/faq/linux-tcp-tuning/
I was hoping some people could provide further input, such as along the lines of disabling nf_conntrack (to speed up socket set up/tear down time) or anything that will speed up a high throughput proxy like mine. Any links to studies or benchmarks between different configurations or hardware gets extra points!
View 7 Replies
View Related
May 4, 2010
I'd like to use ssh as a proxy/socks server and redirect all connections through this proxy.
It would look like : ssh -D 123 -N host
iptables ...
I've never used iptables before and I did not manage to find any useful for this particular case solutions on the internet.
So, what's the good way to do that ?
View 1 Replies
View Related
Mar 11, 2010
I have big problem with correct settings of iptables as a router. My network topology (UTM Hardware router) 192.168.1.1--->eth0 192.168.1.2(centos with apache ftp and transparent squid 8080)--->eth1 192.168.0.1(LAN with dhcp)
eth0=WAN 192.168.1.2
eth1=LAN 192.168.0.1
I have problem with hanging connections through squid which are very slow or connection failed. Sometimes i received DNS timeout error from squid stable 2.6 21
[Code]...
View 1 Replies
View Related
Nov 10, 2010
I need to set up an ip table and a transparent squid proxy as followed: I have 3 machine: Machine 1 works as a squid proxy. It has 2 interface eth1 and eth2.
eth1: 192.168.99.2 (Connect to eth1 of machine 2)
eth2: 192.168.98.2 (Connect to eth1 of machine 3)
machine 2 works as a webserver
eth1: 192.168.99.4
machine 3 works as a web client.
eth1: 192.168.98.4
my responsibility is to send all tcp traffic from machine 3 at port 80 to my squid proxy. In order to fulfill the tasks, I have edited the squid.conf as followed: Code: http_access allow localnet http_access allow localhost and in machine 1, I tried 2 ip tables command: Code: iptables -t nat -A PREROUTING -i eth2 -p tcp --dport 80 -j DNAT --to 192.168.99.2:80 iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 80 I don't know if it is right or wrong.
View 7 Replies
View Related
Feb 23, 2011
I am trying to set up my squid3 proxy as a transparent proxy - right now, I have to manually configure browsers to access via proxy. I understand that I have to put some rules into Iptables and also some further directives in the squid.conf.
I have a couple of specific questions. The proxy server is running on a Ubuntu 10.04 workstation and this machine also acts as a dhcp server for the network. I have just one subnet , namely 192.168.0.1-254 There is only 1 network card. Is it much easier to put in a second network card or is it just as easy to configure the existing lan card as a dual IP?
Is it necessary to configure these 2 IP's ( whether they are via 2 lan cards or dual IP on single card ) to be on different subnets. i.e ETH0 192.168.0.1 and ETH1 192.168.1.1 or is ok to have something like ETH0 192.168.0.1 and ETH1 192.168.0.254 ( where ETH0 is the one facing the LAN and ETH1 points to the modem router / switch i.e The Internet ) Where specifically do I save the Iptables rule configuration file and what must I call it ?
View 4 Replies
View Related
Jan 12, 2011
I setup squid with transparent proxy and its working, however, when I reboot the server, the proxy server doesnt work unless I run the following.
Code: # squid server IP
SQUID_SERVER="192.168.1.1"
# Interface connected to Internet
INTERNET="eth0"
# Interface connected to LAN
LAN_IN="eth1"
# Squid port
SQUID_PORT="3128"
[Code]...
View 6 Replies
View Related
May 20, 2009
I'm using Fedora Core5.0 I have using Iptables for forward port 80 to port 3128(Squid) in the same of server.I need to forward using Iptables to use the other proxy server because this server i am use for vpn and mail tranfer.What a Commnand for i use?ase 1. Server 1 >Ip 192.168.0.4 SQUID WITH PORT(3128)2. Server 2 IP 192.168.0.254 PF SENSE (3128) I will use server 2 for using internet connect only.
View 1 Replies
View Related
Mar 25, 2010
I am new to iptables. We have two Squid proxy servers running in "non-transparent mode" (172.16.0.1 and 172.16.0.2). Currently users have to configure the proxy server they want to use by configuring them in their browsers. Recently I saw an example for redirecting web traffic to a single transparent proxy server.
-A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3128
Can anyone modify this rule to accommodate my current setup of two proxy servers running in non-transparent mode. i.e Redirect web traffic to the 172.16.0.1-172.16.0.2 ip range.
View 2 Replies
View Related
Jun 14, 2010
i have the following ip assignments
fedora (iptables)
eth0 -private :192.168.1.1
eth1 -public : 186.117.50.6
squid proxy
192.168.1.10:3128
my clients range
192.168.2.0/24
how can i make my clients to browse internet only from proxy server my network is NAT 'ed. Please specify a iptable rule to allow internet access for my clients to browse ONLY if they come through proxy server.
View 1 Replies
View Related
Feb 13, 2010
What is a Reverse Proxy? And what is the use of implementing a Reverse Proxy???
View 1 Replies
View Related
Aug 12, 2010
What is a Reverse Proxy? And what is the use of implementing a Reverse Proxy?
View 2 Replies
View Related
Jan 25, 2011
I have a server in a corporate data center for a project. I have an SSH access to this machine at port 22.There are some virtual machines running on this server and then at the back of every thing many other Operating systems are working. Now Since I am behind the data centers firewall my supervisor asked me if I can do some thing by which I can give many people on Internet access to these virtual machines directly. I know if I were allowed to get traffic on port other than 22 then I can do a port forwarding. But since I am not allowed this so what can be a solution in this case.
The people who would like to connect might be complete idiots.Who may be happy just by opening putty at their machines or may be even filezilla.I have configured an Apache Reverse Proxy for redirecting the Internet traffic to the virtual machines on these hosts.But I am not clear as for SSH what can I do.So is there some thing equivalent to an Apache Reverse Proxy which can do similar work for SSH in this situation.I do not have firewall in my hands or any port other than 22 open and in fact even if I request they wont allow to open.2 times SSH is not some thing that my supervisor wants.
View 8 Replies
View Related
May 26, 2010
I'm having some trouble getting Apache up and running as a reverse proxy for a site using SSL. Ideally, this Apache system will function as a web application firewall running mod_security, but first I need to get Apache running right. The system is running CentOS 5.5 and Apache 2.2. Trouble is, the web server on the back end, which is running Windows Web Server 2008 (IIS 7) requires SSL. I have been able to get Apache set up and running so that it works fine on port 80, but any secure traffic on port 443 just won't work.
So first, here's the relevant portion of the Apache config:
Code:
<VirtualHost 192.168.108.212:80>
ServerName www.server.com
ErrorLog logs/test_error_log
CustomLog logs/test_access_log common
ProxyPass / http://192.168.108.152/
ProxyPassReverse / http://192.168.108.152/
</VirtualHost>
<VirtualHost 192.168.108.212:443>
ServerName www.server.com
ErrorLog logs/test_error_log
CustomLog logs/test_access_log common
SSLProxyEngine On
SSLProxyMachineCertificateFile /etc/httpd/conf/server.pem
ProxyPass / https://192.168.108.152/
ProxyPassReverse / https://192.168.108.152/
</VirtualHost>
The server.pem was created following some steps I found online and was set up using the same certificate that's on the web server. It is formatted as so:
Code:
-----BEGIN CERTIFICATE-----
*****
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
*****
-----END RSA PRIVATE KEY-----
So, after all is said and done, Apache starts up just fine. Any unsecured requests on port 80 work just fine. Trying to use https results in an ssl_error_rx_record_too_long error in Firefox. The Apache logs show a 404 error, with the request being for /x16/x03/x01. I believe that means it's requesting SSL access on a non-ssl port, which doesn't make any sense to me, considering that I obviously do have something up on to listen on that port.
View 4 Replies
View Related
Dec 27, 2010
I have a web application running on port 8060 and requires a sub directory on the end (:8060/fisheye/). I also have apache running on port 80 and would like to redirect it to [URL].
Code:
RedirectMatch ^/$ [URL] but the port number is visible, how can I hide it?
View 3 Replies
View Related
Nov 19, 2010
I'm working on setting up a hosted OSS app on a VPS and have a question about doing some proxying. I have Centos 5.5/Apache 2.2 running on 2 VPS's, in different locations, accessible from the net. One of these hosts the app itself, the other will be used as a web portal where the end user will login to auth and then be able to access the app. Now, since I don't wan't access to the app server from the world at large, I want to firewall it and only allow access from the portal machine. So what I think I need to do is set up a reverse proxy with mod_proxy, and then if the end user auths forward them to a specific url on the app server.
So when they connect to [url] and log in I need them to be redirected to app.machine.com/theirdir
So the questions I have are:
1) Can this be done? If so, is mod_proxy the way to do it? Configuring Apache isnt a problem, but I havent worked with mod_proxy.
2) If this does work, will it also work with SSL?
3) I've seen a few small tutorials on the net, but not doing exactly what I want to. They all use the reverse proxy with a public IP connecting to a server with a private IP behind a firewall, while I have public IP's on both ends. From a network standpoint I know this shouldn't matter, but I'm not familiar with mod_proxy's particulars itself.
View 1 Replies
View Related
Aug 24, 2011
I've been struggling with this for a couple of days now. I'm trying to setup a reverse proxy with SSL. The config works when it's not using SSL, but as soon as I setup the virtualhost for 443, I get a ERR_CONNECTION_REFUSED in my browser.
The setup is that it's a CentOS 5.6 running Apache 2.2.3. I was configuring it via this guide: [URL]
This server is acting as a reverse proxy for a Windows server running Apache. Currently, I'm just trying to get the manager page from the Windows server to go through the reverse proxy. Here's the virtual host section of my httpd.conf file on the reverse proxy:
<VirtualHost *:443>
ServerName aspwebview.vtinfo.com
SSLEngine On
SSLCertificateFile /etc/httpd/ssl/star_vtinfo.com.crt
[Code]....
Thoughts? Is there anything I have to do on the Windows server (maybe in the connector section of server.xml)?
View 13 Replies
View Related
Sep 16, 2010
i am installing oracle database 10g2 in my fedora12 with the help of this link ORACLE-BASE - Oracle Database 10g Release 2 (10.2.0.1) Installation On Fedora 7 (F7)Now i am start my Database using sqlplus:[oraclelocalhost ~]$ sqlplusSQL*Plus: Release 10.2.0.1.0 - Production on Thu Sep 16 10:53:47 2010Copyright (c) 1982, 2005, Oracle. All rights reserved.Enter user-name: /as sysdbaConnected to an idle instance.
SQL> startup
ORACLE instance started.
Total System Global Area 167772160 bytes
[code]...
View 4 Replies
View Related
Apr 8, 2011
translationables,i.e,camp_generic_transcamp_generic_trans_defcamp_generic_trans_epcthese tables exist in cntr1/cntr1@camABC1I have to copy these tables from here to staging environment.I need to first check if any of the tables exist in staging.If yes,then delete and create new.There are 4 staging env from 5 to 8.I have to pass the staging environment as parameter to ask the user which environment does he want the tables to be copied
View 1 Replies
View Related
Mar 14, 2009
I'm using Kubuntu 8.04 and now I've installed OpenOffice 3, both in Spanish.I have oracle client installed and can connect to Oracle databases with clients like tora.What I try:
- Open Database and select connect to an existing database.
- Select Oracle JDBC.
- Next
- DatabaseName: I put the sid of the database of oracle. (orcl)
Server URL: The name of the server containing the database. It's resolved by a ping. (database.organization.es)
Port: 1521
- Oracle JDBC Driver:
oracle.jdbc.driver.OracleDriver
But I press the test button, I receive an error: JDBC Driver can't be loaded (really, the message is in spanish).
View 2 Replies
View Related
Oct 12, 2010
I've just installed the Oracle Instant client using this: https://help.ubuntu.com/community/PHPOracle
The phpinfo() show me that oci8 is enable, but when I try to query that database I've got the following message:
PHP Code:
Code:
How to troubleshoot.
View 2 Replies
View Related
Apr 7, 2011
creating the below unix script to run in oracle database .I need a script which should do the following things.
1. The script should insert row count of a table from one database(A) into table (AB) in another database(B).
2. The script should update tow count of the similar table and tablespace from database (B) in to a table AB.
3. The script should update the status column of the table AB as: 'Y' if the rowcount of the table@A and rowcount of the table@B matching. or else it should update 'N'
View 4 Replies
View Related
Mar 14, 2011
I have a reverse proxy set up with squid. I'm going to try and explain what it's doing and I apologize for it being confusing, I'll do the best I can to describe my problem. First, it's for our phone system. We run a ShoreTel Voip system. The owner has decided he wants me to setup MCM (Mobile Call Manager), which from what I can see is an under developed, and almost impossible to get help with Shoretel software. But he's convinced he needs it for his Iphone. It's supposed to, in a nutshell, turn his Iphone into his work phone with all the advantages and doodads that come with it. Apparently, "they have an app for that". On the server side, I need to setup a reverse proxy back into the network on our phone server. Simple enough, I did this with squid. I used the following lines:
Code:
http_port 80 accel defaultsite=172.17.137.7
cache_peer http://172.17.137.7 parent 80 0 no-query originserver name=myAccel
acl our_sites dstdomain http://172.17.137.7
[code]....
Code:
always_direct allow all It most definitely is allowing traffic back to the phone server, the problem is, it hands out my internal server address to the outside client. So for instance, if I connect to the outside routable address with my phone, it will immediately change the url to http://172.17.137.7 which is the inside nat address of my phone server. Which of course doesn't work, since I couldn't browse to that address from the outside. It does however work from the inside of the network, obviously because 172.17.137.7 is accessible from the inside.
View 4 Replies
View Related
May 4, 2010
getting a reverse proxy to work. I have it working fine on my windows box with at32 Reverse Proxy. It was very easy to setup. Anyway I'm wanting to replace that windows box with a Linux box.Here is some background on what I'm trying to get done in Linux.
I have
[url].....
All pointing with a CNAME to my dyndns.org address. I have a dynamic IP from my ISP so I need this and its currently working just fine.my ISP blocks port 80 so I have to use port 443. Port 443 seems to be the most reliable port to use since its one of the ports my ISP does not block and its one of the ports other places like hotels dont block.So I want to access my bittorrent server. I type in http:[url]....443 and the at32 Reverse Proxy points it to my internal server http://bittorrent on port 80.
I got this to work perfect in windows.So right now I'm doing this all in a virtual machine for testing. I have Apache all setup and working with the reverse proxy except for my thermostat's web server.Here is how I have it setup in the virtual machine.The machine is called testbox and its running Ubuntu Alt 10.04 32bit .In that VM I can go to http: // testbox but it will only display the HTML code of the page.If I go directly to the main page on the thermostat http://testbox/index.shtml the web page renders just fine and all the links work.My sites-available config file has this inside.
<VirtualHost testbox:80>
ProxyPass / http://192.168.0.205/
ProxyPassReverse / http://192.168.0.205/
</VirtualHost>
The config file is for port 80 but I think once I get things working in the testbox I should not have any problems switching it to port 443.
View 2 Replies
View Related
May 11, 2010
A first server with apache2 installed and configured as reverse proxy, that works great, with this version:
That works mostly, but fail with an oma (outlook mobile access) redirection
It works for all reverse sites hosted, but when we try to connect to oma using a nokia phone, it fails.
I can see in access.log that it hangs on FolderSync istance.
I've used wireshark to sniff packets, and in oma server I can see only three way handshaking coming...
My doubt is: when I'll upgrade working server, also it will not work anymore...
Configurations are the same (I've copied /etc/apache2 folder from running one to new one).
View 1 Replies
View Related
Oct 4, 2010
I have a question to masters of Apache. In my operating system (CentOS 5) I have installed two Apaches. One is Apache (port 80) from repository where I planning to configure proxy and second one is Apache integrated(port 8090) with KnowledgeTree software. The problem is that when I am trying to configure proxy reverse it simply doesn't work.
This is link to KnowledgeTree software:
- http://127.0.0.1:8090/knowledgeTree
This link I would like to rewrite with proxy like this:
https://myserver.com/knowledgeTree
(HTTPS dont forget)
In my ssl.conf in VirtualHost part I have created something like this:
Code:
<IfModule mod_proxy.c>
<Proxy *>
Order allow,deny
Allow from all
</Proxy>
ProxyRequests off
ProxyPass /knowledgeTree http://127.0.0.1:8090/knowledgeTree
ProxyPassReverse /knowledgeTree http://127.0.0.1:8090/knowledgeTree
<Location /knowledgeTree/>
ProxyPassReverse /
</Location>
</IfModule>
When I am trying to connect I see only: Unable to connect. Firefox can't establish a connection to the server at ifdocu.contaxt.biz:8090.
View 4 Replies
View Related
Mar 22, 2011
I am trying to configure a reverse proxy server that can act as a reverse proxy for ms sharepoint server that uses https. Usually when I accessed the sharepoint server at [URL], I will be prompted to enter active directory login. But what was "500 internal server error" and in error.log: failed to enable ssl support for 10.10.1.1 (sharepoint.mycompany)
View 2 Replies
View Related
Jul 2, 2011
I want Install nginx As Reverse Proxy for Apache
View 5 Replies
View Related
