Re: Replication over a firewall

From: Jack Lee (jack_at_tek-files.com)
Date: 10/08/04 

Date: 8 Oct 2004 11:10:04 -0700

I guess that's the answer. thanks for your help. VPN was tried before
but they said there was no CE client for the Cisco VPN they are using.
I guess time to research 3rd party VPN clients, maybe there is one now
or we might be out of luck.

Just curious, do you work for Microsoft, or just a kind sole helping
people? or both? ;)

Jack

"Darren Shaffer" <darrens@nospam.com> wrote in message news:<ud3FKZNrEHA.1160@tk2msftngp13.phx.gbl>...
> Yes, inbound access is required to pull the updates from the server.
> Most projects I've done where the firewall admin won't open a port
> for replication use a VPN to get around it.
>
> -Darren
>
> "Jack Lee" <jack@tek-files.com> wrote in message
> news:31cf38f6.0410071421.882caaa@posting.google.com...
> > Thanks for taking the time to answer. I'm actually using eVC 3.0 and
> > not the CF, it's an older application that was shelved because of the
> > problem, now we are trying to figure it out again. Is the 3.0
> > replication code more probmatic than 4.0?
> >
> > when you say "make sure the snapshot folder name is the default
> > name..." are you suggesting that a file structure such a "c:\snapshot"
> > for a publication named "MyDB" should be "c:\MyDB"? In the properties
> > i set the location to be "\\MY_SVR\C$\snapshot"
> >
> > item 2, i'll double check but i beleive it is a user account.
> >
> > item 3, IIS and SQL are on the same machine, so there is no delegation
> > and i use the parameters for sql authentication.
> >
> > Since it works inside the firewall, i think items 1,2 and 3 are ok.
> > I only found a few articles in the newsgroups, 3 of them mentioned
> > they had norton's firewall and that caused the problem, it was somehow
> > stripping some of the data from the messages for no good reason. We
> > are not using Norton but maybe what we are using is somehow based on
> > the same engine Norton uses.
> >
> > The person in charge of the firewall said they block inbound requests
> > on port 80 and 1433 (SSL). Is inbound required?
> >
> > thanks
> > Jack
> >
> > "Darren Shaffer" <darrens@nospam.com> wrote in message
> > news:<#YolO5CrEHA.452@TK2MSFTNGP09.phx.gbl>...
> >> That's very good news. It means your CF app should also be able to get
> >> to
> >> the publication
> >> using the same credentials. Double check the parameters you are passing
> >> with your
> >> SqlCeReplication object according to:
> >> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/html/frlrfsystemdatasqlservercesqlcereplicationclasstopic.asp
> >>
> >> If you are effectively setting the exact same values for:
> >>
> >> repl.InternetUrl = "<http://jackspath/sqlce/sscesa20.dll>";
> >> repl.InternetLogin = "<username>";
> >> repl.InternetPassword = "<password>";
> >>
> >> that you just used from Pocket IE, then that means there is something
> >> about
> >> the publication you
> >> created which resolves fine when inside the firewall, but cannot be
> >> resolved
> >> from outside.
> >>
> >> Some troubleshooting advice:
> >>
> >> 1. make sure the snapshot folder name is the default name that SQL
> >> Server
> >> suggested when
> >> you indicated that this publication could be used for merge - merge will
> >> only work with that default
> >> name
> >>
> >> 2. make sure you're running sql server and sql server agent under an
> >> acount
> >> other than localsystem.
> >>
> >> 3. check users and permissions for the InternetLogin parameter above -
> >> you
> >> know you can get to IIS
> >> and sscesa20.dll but can that be delegated through to Sql Server and the
> >> tables you are trying to replicate?
> >>
> >> We'll figure this out, merge replication just has a lot of points of
> >> failure
> >> to eliminate.
> >>
> >> -Darren
> >>
> >>
> >>
> >> "Jack Lee" <jack@tek-files.com> wrote in message
> >> news:31cf38f6.0410052232.5a14360a@posting.google.com...
> >> > navigating to sscesa20.dll works fine in pocket IE. i get prompted for
> >> > authentication, after i log in, the standard "SQL Server CE Server
> >> > Agent" message is displayed.
> >> >
> >> > jack
> >> >
> >> > "Darren Shaffer" <darrens@nospam.com> wrote in message
> >> > news:<eFmaemyqEHA.3416@TK2MSFTNGP15.phx.gbl>...
> >> >> Jack,
> >> >>
> >> >> From your device, go to Pocket IE and enter the URL to the virtual
> >> >> directory
> >> >> containing sscesa20.dll on your IIS server. If you cannot
> >> >> successfully
> >> >> get
> >> >> the response,
> >> >> merge replication will not work either because of firewall issues or
> >> >> some
> >> >> other
> >> >> routing/configuration issue.
> >> >>
> >> >> -Darren
> >> >>
> >> >>
> >> >> "Jack Lee" <jack@tek-files.com> wrote in message
> >> >> news:31cf38f6.0410051252.57ab54d@posting.google.com...
> >> >> > Does Sql Server Ce replication over IIS require the inbound port on
> >> >> > the firewall to be open in addition to the outbound?
> >> >> >
> >> >> > It works fine when i'm on the WAN, but when i try it outside the
> >> >> > WAN,
> >> >> > i get an error
> >> >> > Error Number: 80072F76
> >> >> > Native Number: 28035
> >> >> > Error Description: Header information is either corrupted or
> >> >> > missing.
> >> >> >
> >> >> > The only difference is a firewall and server proxy. The logs have
> >> >> > nothing interesting in them. So i can only think that it is the
> >> >> > firewall and i do not have control over it, so i can not simply open
> >> >> > the inbound to test it. Can i assume the
> >> >> > CEMerge->put_InternetProxyServer is for the client side and not the
> >> >> > server's proxy settings?
> >> >> >
> >> >> > thanks
> >> >> > Jack

Relevant Pages

  • Re: SBS 2008 - Firewall Appliance?
    ... Cisco ASA 5510 Appliance Content Security Edition Bundle ... 250 IPsec VPN peers, ... But "firewall services" are simply listed as included. ... If you don't need AV or VPN then this is overkill....and I recommend running client AV on a server that can handle monitoring anyways....not using an edge device as the client AV manager...but that's another conversation. ...
    (microsoft.public.windows.server.sbs)
  • Re: remoting not working through vpn
    ... These can act differently depending on where the VPN terminates. ... I have ISA firewall and all my VPN connections terminate on the firewall system. ... The other case might be that you have tunneled the VPN completely through the firewall and let it terminate on the server itself. ... The problem may be in how the client system is presenting its ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: Teleworking
    ... Cisco VPN Client running on local PC ... ADSL router runing VPN passthrough and full firewall ... > simplify the management and deployment of PGP and reduce overall PGP ...
    (Security-Basics)
  • Re: RE:Sizing a Firewall for a Client
    ... about the Sonic Wall Pro, when in turn will cost you at least 3 times as ... Sizing a Firewall for a Client ... We've tested the Sonicwall with up to 5 VPN clients at once ...
    (Security-Basics)
  • [NEWS] Cisco VPN 5000 Client Multiple Vulnerabilities
    ... Multiple vulnerabilities exist in the Cisco Virtual Private Network (VPN) ... 5000 Client software. ... These vulnerabilities are documented as Cisco bug ID ... CSCdx17109 - MAC OS VPN 5000 Client password vulnerability ...
    (Securiteam)