Re: Network connection-restatement (sorry)-server can't find client

I think the RT314 is very similar to the RT311 and on my RT311 I can
configure individual ports to be routed.   I recommend trying routing just
4200 before trying the DMZ option because that will be a more secure
solution.  I can't tell you whether or not this will work because our VPN
uses IPSec in a way that the RT311/RT314 cannot route so I don't use the
RT311 with Code.

I wholeheartedly second Vince's suggestion that you should get a software
firewall in addition to your router; especially since you are connecting to
your workplace. Another option for the software firewall is from
www.tinysoftware.com called Tiny Personal Firewall.  It's just a little more
complicated to use than Zone Alarm but is more configurable and has better
logging.

Good luck,
Larry

----- Original Message -----
From: "Vincent Greene" <Vincent.Greene@amo.com>
To: <code400-l@midrange.com>
Sent: Friday, November 23, 2001 8:18 AM
Subject: Re: Network connection-restatement (sorry)-server can't find client


> I think you are correct.  The RT314 is receiving the packet on port 4200
and
> discarding it as a illegal packet (or directing it to a specific port --
see
> below)
>
> I believe that the RT314 has a "dmz" option where all incoming packets
from the
> internet are directed to a specifc switch port and internal address.  To
make it
> work, you will probably need to plug your system into that port and enable
the
> dmz option.  If you try this, BEWARE!  You need to run a software firewall
> because the NAT on the RT314 will no longer be protecting your PC.
Frankly, you
> should run a software firewall anyway since a good hacker can penetrate a
NAT
> "firewall" pretty easily.  I would recommend ZoneAlarm (see
www.zonealarm.com)
> as a good software firewall.  Steve Gibsons site are www.grc.com has
firewall
> information and reviews, as well as some good testing tools.
>
> This is especially true if you are using a VPN to connect to work.  A
hacker
> that can penetrate your NAT device to get to your PC could then piggyback
on the
> VPN connection to get to your network at work.  That is how the hackers
got into
> Microsoft to steal the code to NT.
>
> Good Luck!
>
> Reeve Fritchman wrote:
>
> > Hak, thanks for your comments.
> > All IPCONFIG sees is DELL450 (my desktop) with an IP address of
192.168.0.3;
> > the RT314 has the external (public) address and that must be the address
> > EVFCFDBK is sending to.  I think CODE/400 is fine; the RT314 doesn't
know
> > what to do with the message it's receiving.  Or, let's say I don't know
how
> > to configure the RT314!
> > My ThinkPad works properly (STRCODE, compile feedback) when dialed in or
> > directly connected to the network.  It does not work when connected
through
> > the RT314; this indicates the server/firewall side is okay and points to
an
> > RT314 problem.  I'm starting to wonder if the RT314 isn't smart enough
to
> > handle this kind of transaction.
> > My Dell desktop gives me EVF4028E ("Connection ended by daemon.  Code
user
> > ID REEVE is not allowed to connect") when dialed in or when directly
> > connected to the network.  It does not work when connected through the
> > RT314.
> > I'm going to take the RT314 issue to a different forum; I'm 99.99%
confident
> > it's not a CODE/400 problem and I think you have better things to work
on.
> > But I'd love to solve the EVF4028E problem.  I've deleted and recreated
my
> > usual server; should I delete and recreate all servers?
> > Both PC's are Win2K w/SP2; CODE/400 is V5R1 w/SP4; iBox is V5R1.
> > CODE/400 (and everything else) on the Thinkpad was recently installed
from
> > scratch and I applied SP3 directly.  Is it worth my time to reload
CODE/400
> > on the desktop?  If so, is there anything I should do to uninstall
CODE/400
> > first?
> > Thanks,
> > Reeve
> >
> > -----Original Message-----
> > From: code400-l-admin@midrange.com
[mailto:code400-l-admin@midrange.com]On
> > Behalf Of haklui@ca.ibm.com
> > Sent: Thursday, November 22, 2001 11:54 PM
> > To: code400-l@midrange.com
> > Subject: Re: Network connection-restatement (sorry)-server can't find
client
> >
> > When the compile is done the host will execute a "calls back" to the
> > client.  There are two possible reasons we can think of that might be
> > causing this problem.
> >
> > 1.  One of the firewalls (either the RT314 or the one between the cable
> >    modem and the 820) is not allowing the call back to pass through.
> >               So you can check which port the "call back" is using and
make
> >    sure that the firewall allows the connection. You can probably get
the
> >    port  information from your firewall tools.
> >
> > 2.  The host code is not getting the correct address to do the call back
> >    (and in fact is trying to connect to a different client.)  If you go
to
> >    a DOS window and run ipconfig then you will see all network addresses
> >    that the Windows machine is using.  If there are multiple addresses
> >    listed then the first one must be the address that should be passed
to
> >    the server for the "call back".  On Windows 2000, I think that you
can
> >    go to the Network Connections->Advance Settings to move your
workstation
> >    address up and down.
> >
> > You might want to check if the feed back works by STRCODE and then on  I
> > can't get STRCODE to work through my network connection.
> >    another OS400 session try the command:
> >
> >    CALL QCODE/EVFCFDBK PARM( '37' 'Y' 'OS400' '<LOCAL> CODEEDIT
> >    "<OS400>lib/file(member)"' ).
> >               Change QCODE to QDEVTOOLS if you are on V5R1 OS/400.
> >
> >    Hak Lui
> >    AS/400 AD, IBM Canada Ltd.
> >    e-mail: haklui@ca.ibm.com
> >
> > "Reeve Fritchman" <reeve@ltl400.com>@midrange.com on 11/21/2001 03:06:47
PM
> >
> > Please respond to code400-l@midrange.com
> >
> > Sent by:  code400-l-admin@midrange.com
> >
> > To:   "CODE400-L@midrange. com" <CODE400-L@midrange.com>
> > cc:
> > Subject:  Network connection-restatement (sorry)-server can't find
client
> >
> > I'm having trouble getting a CODE/400 server connection when working
> > through
> > my network connection.  I can't get the error list back when I submit a
> > compile; everything else (LPEX, Verify, GUI prompting, etc.) works fine.
I
> > know I could Verify first, but basing on caching performance, it's
faster
> > to
> > compile.
> >
> > I have two systems connected to a Netgear RT314 Gateway Router (no
> > ROTFLYAO,
> > please) and then into a cable modem up to the 820 via a firewall.  The
> > RT314
> > provides NAT and some firewall protection.  The IP address seen by the
> > RT314
> > is not fixed (today it's 65.34.yada.yada); within the LAN, the RT314 is
> > 192.168.0.1 and the other systems are ".2" and ".3".
> >
> > When I use a dial-up connection (without the RT314), everything works
fine
> > (because CODE/400 knows my IP address).  I think this shows the server
> > is not causing the problem.
> >
> > I assume the RT314 is the issue.  The iBox is giving me EVF4000, "A
remote
> > host refused an attempted connect operation."  (3425).
> >
> > I'd be grateful for any help...
> >
> > Thanks,
> > Reeve
> >
> > _______________________________________________
> > This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> > To post a message email: CODE400-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> > or email: CODE400-L-request@midrange.com
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/code400-l.
> >
> > _______________________________________________
> > This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> > To post a message email: CODE400-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> > or email: CODE400-L-request@midrange.com
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/code400-l.
> >
> > _______________________________________________
> > This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> > To post a message email: CODE400-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> > or email: CODE400-L-request@midrange.com
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/code400-l.
>
> _______________________________________________
> This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> To post a message email: CODE400-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> or email: CODE400-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/code400-l.
>
>



__________________________________________________
D O T E A S Y - "Join the web hosting revolution!"
             http://www.doteasy.com