Re: Replication over a firewall

From: Darren Shaffer (darrens_at_nospam.com)
Date: 10/07/04


Date: Thu, 7 Oct 2004 17:23:26 -0600

Yes, inbound access is required to pull the updates from the server.
Most projects I've done where the firewall admin won't open a port
for replication use a VPN to get around it.

-Darren

"Jack Lee" <jack@tek-files.com> wrote in message
news:31cf38f6.0410071421.882caaa@posting.google.com...
> Thanks for taking the time to answer. I'm actually using eVC 3.0 and
> not the CF, it's an older application that was shelved because of the
> problem, now we are trying to figure it out again. Is the 3.0
> replication code more probmatic than 4.0?
>
> when you say "make sure the snapshot folder name is the default
> name..." are you suggesting that a file structure such a "c:\snapshot"
> for a publication named "MyDB" should be "c:\MyDB"? In the properties
> i set the location to be "\\MY_SVR\C$\snapshot"
>
> item 2, i'll double check but i beleive it is a user account.
>
> item 3, IIS and SQL are on the same machine, so there is no delegation
> and i use the parameters for sql authentication.
>
> Since it works inside the firewall, i think items 1,2 and 3 are ok.
> I only found a few articles in the newsgroups, 3 of them mentioned
> they had norton's firewall and that caused the problem, it was somehow
> stripping some of the data from the messages for no good reason. We
> are not using Norton but maybe what we are using is somehow based on
> the same engine Norton uses.
>
> The person in charge of the firewall said they block inbound requests
> on port 80 and 1433 (SSL). Is inbound required?
>
> thanks
> Jack
>
> "Darren Shaffer" <darrens@nospam.com> wrote in message
> news:<#YolO5CrEHA.452@TK2MSFTNGP09.phx.gbl>...
>> That's very good news. It means your CF app should also be able to get
>> to
>> the publication
>> using the same credentials. Double check the parameters you are passing
>> with your
>> SqlCeReplication object according to:
>> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/html/frlrfsystemdatasqlservercesqlcereplicationclasstopic.asp
>>
>> If you are effectively setting the exact same values for:
>>
>> repl.InternetUrl = "<http://jackspath/sqlce/sscesa20.dll>";
>> repl.InternetLogin = "<username>";
>> repl.InternetPassword = "<password>";
>>
>> that you just used from Pocket IE, then that means there is something
>> about
>> the publication you
>> created which resolves fine when inside the firewall, but cannot be
>> resolved
>> from outside.
>>
>> Some troubleshooting advice:
>>
>> 1. make sure the snapshot folder name is the default name that SQL
>> Server
>> suggested when
>> you indicated that this publication could be used for merge - merge will
>> only work with that default
>> name
>>
>> 2. make sure you're running sql server and sql server agent under an
>> acount
>> other than localsystem.
>>
>> 3. check users and permissions for the InternetLogin parameter above -
>> you
>> know you can get to IIS
>> and sscesa20.dll but can that be delegated through to Sql Server and the
>> tables you are trying to replicate?
>>
>> We'll figure this out, merge replication just has a lot of points of
>> failure
>> to eliminate.
>>
>> -Darren
>>
>>
>>
>> "Jack Lee" <jack@tek-files.com> wrote in message
>> news:31cf38f6.0410052232.5a14360a@posting.google.com...
>> > navigating to sscesa20.dll works fine in pocket IE. i get prompted for
>> > authentication, after i log in, the standard "SQL Server CE Server
>> > Agent" message is displayed.
>> >
>> > jack
>> >
>> > "Darren Shaffer" <darrens@nospam.com> wrote in message
>> > news:<eFmaemyqEHA.3416@TK2MSFTNGP15.phx.gbl>...
>> >> Jack,
>> >>
>> >> From your device, go to Pocket IE and enter the URL to the virtual
>> >> directory
>> >> containing sscesa20.dll on your IIS server. If you cannot
>> >> successfully
>> >> get
>> >> the response,
>> >> merge replication will not work either because of firewall issues or
>> >> some
>> >> other
>> >> routing/configuration issue.
>> >>
>> >> -Darren
>> >>
>> >>
>> >> "Jack Lee" <jack@tek-files.com> wrote in message
>> >> news:31cf38f6.0410051252.57ab54d@posting.google.com...
>> >> > Does Sql Server Ce replication over IIS require the inbound port on
>> >> > the firewall to be open in addition to the outbound?
>> >> >
>> >> > It works fine when i'm on the WAN, but when i try it outside the
>> >> > WAN,
>> >> > i get an error
>> >> > Error Number: 80072F76
>> >> > Native Number: 28035
>> >> > Error Description: Header information is either corrupted or
>> >> > missing.
>> >> >
>> >> > The only difference is a firewall and server proxy. The logs have
>> >> > nothing interesting in them. So i can only think that it is the
>> >> > firewall and i do not have control over it, so i can not simply open
>> >> > the inbound to test it. Can i assume the
>> >> > CEMerge->put_InternetProxyServer is for the client side and not the
>> >> > server's proxy settings?
>> >> >
>> >> > thanks
>> >> > Jack



Relevant Pages

  • Re: How to Replicate an SQL Server 2000 Database
    ... Looking for a SQL Server replication book? ... actual server name) enterprise manager should associate the database with ...
    (microsoft.public.sqlserver.replication)
  • Re: How to Replicate an SQL Server 2000 Database
    ... Looking for a SQL Server replication book? ... actual server name) enterprise manager should associate the database with ...
    (microsoft.public.sqlserver.replication)
  • Re: Best replication architecture?
    ... Looking for a SQL Server replication book? ... So if it is subscribing to Publisher 1, ...
    (microsoft.public.sqlserver.replication)
  • Re: IS IT SAFE TO HOST SQL SERVER AND IIS SERVER ON THE SAME MACHINE
    ... > safe to host a web application on a mchine outside of our firewall ... and the sql server would reside on this one machine. ... The vulnerabilities of Windows, IIS and SQL are well known, so you ...
    (microsoft.public.inetserver.iis.security)
  • Re: SharePoint and SQL Sercer replication
    ... the DR SQL server in non useable mode. ... can then turn the standby SQL server into recieving requests but again the ... server when replication takes place and even after the farm fails the ...
    (microsoft.public.sharepoint.portalserver)