Re: Network connection-restatement (sorry)-server can't find client

>From what Larry said, it appears you can probably open just the one port on 
>your
RT314.  That would be a much better option.  At home I run Code/400 on a 300 Mhz
Cyrix (128 Mb) with ZoneAlarm and VPN software.  The performance is acceptable
(not great, but I can't afford an upgrade now).  I don't think the firewall adds
much overhead.  I really can't tell the difference between having it installed
and not having it installed.

The RT314's NAT function is really only valuable to allow you to connect
multiple machines to a single external IP address.  For that function, it is
great.  Using a NAT box as a firewall is like using a padlock and a piece of
rope to secure a gate.  It will keep the honest people out, and it will keep out
the people that don't know that ropes can be cut.  It will not keep out the
people that know how to cut a rope.

As Larry said, even if you can configure the RT314 to pass only the one needed
port, install a software firewall.

The only reason I can think of to steal the source for NT is to figure out how
the darn thing is supposed to work.

Reeve Fritchman wrote:

> Vincent, thanks for your enlightening comments; you've made sense out of a
> jumble of facts.  If I add a software firewall, does the RT314's NAT lose
> its value?
>
> Otherwise, I have a problem and a question.  My problem?  This ol' 450 mHz.
> machine will gasp when I add a software firewall on it (I've had Norton on
> it); it's time to look for a new Pentium.  My question?  Why on earth would
> anybody /want/ to steal NT source?  I figured Microsoft would be hacking
> into Sun, downloading it to Sun, and try to get Sun to fix it.
>
> Thanks again,
> Reeve
>
> -----Original Message-----
> From: code400-l-admin@midrange.com
> [mailto:code400-l-admin@midrange.com]On Behalf Of Vincent Greene
> Sent: Friday, November 23, 2001 11:19 AM
> To: code400-l@midrange.com
> Subject: Re: Network connection-restatement (sorry)-server can't find
> client
>
> I think you are correct.  The RT314 is receiving the packet on port 4200 and
> discarding it as a illegal packet (or directing it to a specific port -- see
> below)
>
> I believe that the RT314 has a "dmz" option where all incoming packets from
> the
> internet are directed to a specifc switch port and internal address.  To
> make it
> work, you will probably need to plug your system into that port and enable
> the
> dmz option.  If you try this, BEWARE!  You need to run a software firewall
> because the NAT on the RT314 will no longer be protecting your PC.  Frankly,
> you
> should run a software firewall anyway since a good hacker can penetrate a
> NAT
> "firewall" pretty easily.  I would recommend ZoneAlarm (see
> www.zonealarm.com)
> as a good software firewall.  Steve Gibsons site are www.grc.com has
> firewall
> information and reviews, as well as some good testing tools.
>
> This is especially true if you are using a VPN to connect to work.  A hacker
> that can penetrate your NAT device to get to your PC could then piggyback on
> the
> VPN connection to get to your network at work.  That is how the hackers got
> into
> Microsoft to steal the code to NT.
>
> Good Luck!
>
> Reeve Fritchman wrote:
>
> > Hak, thanks for your comments.
> > All IPCONFIG sees is DELL450 (my desktop) with an IP address of
> 192.168.0.3;
> > the RT314 has the external (public) address and that must be the address
> > EVFCFDBK is sending to.  I think CODE/400 is fine; the RT314 doesn't know
> > what to do with the message it's receiving.  Or, let's say I don't know
> how
> > to configure the RT314!
> > My ThinkPad works properly (STRCODE, compile feedback) when dialed in or
> > directly connected to the network.  It does not work when connected
> through
> > the RT314; this indicates the server/firewall side is okay and points to
> an
> > RT314 problem.  I'm starting to wonder if the RT314 isn't smart enough to
> > handle this kind of transaction.
> > My Dell desktop gives me EVF4028E ("Connection ended by daemon.  Code user
> > ID REEVE is not allowed to connect") when dialed in or when directly
> > connected to the network.  It does not work when connected through the
> > RT314.
> > I'm going to take the RT314 issue to a different forum; I'm 99.99%
> confident
> > it's not a CODE/400 problem and I think you have better things to work on.
> > But I'd love to solve the EVF4028E problem.  I've deleted and recreated my
> > usual server; should I delete and recreate all servers?
> > Both PC's are Win2K w/SP2; CODE/400 is V5R1 w/SP4; iBox is V5R1.
> > CODE/400 (and everything else) on the Thinkpad was recently installed from
> > scratch and I applied SP3 directly.  Is it worth my time to reload
> CODE/400
> > on the desktop?  If so, is there anything I should do to uninstall
> CODE/400
> > first?
> > Thanks,
> > Reeve
> >
> > -----Original Message-----
> > From: code400-l-admin@midrange.com [mailto:code400-l-admin@midrange.com]On
> > Behalf Of haklui@ca.ibm.com
> > Sent: Thursday, November 22, 2001 11:54 PM
> > To: code400-l@midrange.com
> > Subject: Re: Network connection-restatement (sorry)-server can't find
> client
> >
> > When the compile is done the host will execute a "calls back" to the
> > client.  There are two possible reasons we can think of that might be
> > causing this problem.
> >
> > 1.  One of the firewalls (either the RT314 or the one between the cable
> >    modem and the 820) is not allowing the call back to pass through.
> >               So you can check which port the "call back" is using and
> make
> >    sure that the firewall allows the connection. You can probably get the
> >    port  information from your firewall tools.
> >
> > 2.  The host code is not getting the correct address to do the call back
> >    (and in fact is trying to connect to a different client.)  If you go to
> >    a DOS window and run ipconfig then you will see all network addresses
> >    that the Windows machine is using.  If there are multiple addresses
> >    listed then the first one must be the address that should be passed to
> >    the server for the "call back".  On Windows 2000, I think that you can
> >    go to the Network Connections->Advance Settings to move your
> workstation
> >    address up and down.
> >
> > You might want to check if the feed back works by STRCODE and then on  I
> > can't get STRCODE to work through my network connection.
> >    another OS400 session try the command:
> >
> >    CALL QCODE/EVFCFDBK PARM( '37' 'Y' 'OS400' '<LOCAL> CODEEDIT
> >    "<OS400>lib/file(member)"' ).
> >               Change QCODE to QDEVTOOLS if you are on V5R1 OS/400.
> >
> >    Hak Lui
> >    AS/400 AD, IBM Canada Ltd.
> >    e-mail: haklui@ca.ibm.com
> >
> > "Reeve Fritchman" <reeve@ltl400.com>@midrange.com on 11/21/2001 03:06:47
> PM
> >
> > Please respond to code400-l@midrange.com
> >
> > Sent by:  code400-l-admin@midrange.com
> >
> > To:   "CODE400-L@midrange. com" <CODE400-L@midrange.com>
> > cc:
> > Subject:  Network connection-restatement (sorry)-server can't find client
> >
> > I'm having trouble getting a CODE/400 server connection when working
> > through
> > my network connection.  I can't get the error list back when I submit a
> > compile; everything else (LPEX, Verify, GUI prompting, etc.) works fine.
> I
> > know I could Verify first, but basing on caching performance, it's faster
> > to
> > compile.
> >
> > I have two systems connected to a Netgear RT314 Gateway Router (no
> > ROTFLYAO,
> > please) and then into a cable modem up to the 820 via a firewall.  The
> > RT314
> > provides NAT and some firewall protection.  The IP address seen by the
> > RT314
> > is not fixed (today it's 65.34.yada.yada); within the LAN, the RT314 is
> > 192.168.0.1 and the other systems are ".2" and ".3".
> >
> > When I use a dial-up connection (without the RT314), everything works fine
> > (because CODE/400 knows my IP address).  I think this shows the server end
> > is not causing the problem.
> >
> > I assume the RT314 is the issue.  The iBox is giving me EVF4000, "A remote
> > host refused an attempted connect operation."  (3425).
> >
> > I'd be grateful for any help...
> >
> > Thanks,
> > Reeve
> >
> > _______________________________________________
> > This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> > To post a message email: CODE400-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> > or email: CODE400-L-request@midrange.com
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/code400-l.
> >
> > _______________________________________________
> > This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> > To post a message email: CODE400-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> > or email: CODE400-L-request@midrange.com
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/code400-l.
> >
> > _______________________________________________
> > This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> > To post a message email: CODE400-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> > or email: CODE400-L-request@midrange.com
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/code400-l.
>
> _______________________________________________
> This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> To post a message email: CODE400-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> or email: CODE400-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/code400-l.
>
> _______________________________________________
> This is the CODE/400 Discussion & Support (CODE400-L) mailing list
> To post a message email: CODE400-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/code400-l
> or email: CODE400-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/code400-l.