DNS error on internal servers using proxy on workstation

I need a little direction with my problem.  Workstations can not access our
private internal servers by name when proxy is set.  For example, a server
that is named 2KData can only be accessed when the workstation proxy is off.
At a command prompt, the workstation can ping and resolve the A5Data server
to the correct IP address.

I have tried to set the DNS order on the worksation to BM first, then the
W2K DNS server.  I've also tried to reverse the DNS order with no luck.
Always the same result with IE5.5 and IE6.0.

What I would really like to do is for the browser to bypass the proxy for
all internal servers.  I can't get the syntax correct in the "bypass local
proxy" settings.  Wildcards do not seem to work.  We have several servers
that start with A5.

Would someone point me in the right direction?


Setup:  NBM 3.7 +SP2 on NW6.0 SP3   (IP 10.10.75.1)
            NBM is setup for DNS proxy, caching, and URL filtering utilizing
SurfControl

            PIX firewall                                    (IP 10.10.75.2)

            Internal DNS running on a Win2K server.    (IP 10.10.65.7)


On the DNS Resolver Configuration screen, the internal DNS (10.10.65.7) is
the first name server.  The second and third name servers are external.

The Win2K internal DNS server has the correct server name and IP address in
the list.



0
a5wanman
3/22/2004 9:05:12 PM
novell.bordermanager.proxies 3217 articles. 0 followers. Follow

7 Replies
283 Views

Similar Articles

[PageSpeed] 21

On Mon, 22 Mar 2004 21:05:12 GMT, "a5wanman" <a5wanman@earthlink.net>
wrote:

>
>I need a little direction with my problem.  Workstations can not access our
>private internal servers by name when proxy is set.  For example, a server
>that is named 2KData can only be accessed when the workstation proxy is off.
>At a command prompt, the workstation can ping and resolve the A5Data server
>to the correct IP address.

I'm working with a similar problem.  Please  tell me if your server
name is reachable when fully qualified.  If 2KData doesn't work, does
2KData@YourDomainName  work?  I am finding this to be the case.

Chris
0
Chris
3/23/2004 3:33:03 PM
Chris,

I'm no expert but I'm guessing that you haven't quite got your DNS set up
properly as per
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10021611.htm

HTH

"Chris Davis" <cld@prin.edu> wrote in message
news:d2m060di1p5e91779l9rhjcq3hc4l5959q@4ax.com...
> On Mon, 22 Mar 2004 21:05:12 GMT, "a5wanman" <a5wanman@earthlink.net>
> wrote:
>
> >
> >I need a little direction with my problem.  Workstations can not access
our
> >private internal servers by name when proxy is set.  For example, a
server
> >that is named 2KData can only be accessed when the workstation proxy is
off.
> >At a command prompt, the workstation can ping and resolve the A5Data
server
> >to the correct IP address.
>
> I'm working with a similar problem.  Please  tell me if your server
> name is reachable when fully qualified.  If 2KData doesn't work, does
> 2KData@YourDomainName  work?  I am finding this to be the case.
>
> Chris


0
Paul
3/29/2004 8:18:23 PM
On Mon, 29 Mar 2004 20:18:23 GMT, "Paul Gregory" <nospam@nospam.com>
wrote:

>Chris,
>
>I'm no expert but I'm guessing that you haven't quite got your DNS set up
>properly as per
>http://support.novell.com/cgi-bin/search/searchtid.cgi?/10021611.htm

No, that was all set up right.  Apparently Novell states that this is
normal behavior.  Using the proxy can't resolve local names without
being fully qualified.  (Never mind the fact that we've been doing
just that for upward of 5 years since NBM2.1).  I'm not sure what set
things off in NW6SP4 and NBM37SP3/FP4A, but something did.  

I had the DNS stuff set right.  Like I said, TIDs 10014897 and 2938186
say that Internal web sites have to be defined in the Hosts file on
the proxy server.  I made entries for them by typing the IP addresss,
then tab, then fully qualified machine name with domain, then aliases
without domain extensions.

192.168.1.1	www.youcompany.com	www	web

And hosts is kinda like slp.cfg, you have to have a blank line at the
end of it, or the last line doesn't get read.  

The fact that this worked for years, still leads me to believe this is
a big, FAT, WRONG bug, but I can't get Novell to admit it.  It sounds
so logical to my boss who doesn't like proxy anyway when I say "Oh,
yeah, we just have fully qualify our internal web sites" or I have to
run around and put every internal site into one of our 3 proxies and
my test box.   

Chris
0
Chris
3/30/2004 11:02:30 PM
<<Using the proxy can't resolve local names without
<<being fully qualified.

What do you have in your proxy.cfg for
DoNotCreateFullyQualifiedHostNames, if you have one?

if is 1, then you will see this issue, but if it is 0, it should work.


<<The fact that this worked for years, still leads me to believe this is

<<a big, FAT, WRONG bug, but I can't get Novell to admit it

I do not believe is a FAT, WRONG bug, but just the setting in the
proxy.cfg file.

Thanks

Gonzalo

0
mysterious
4/28/2004 1:52:47 PM
On Wed, 28 Apr 2004 13:52:47 GMT, mysterious <morera@globalxs.nl>
wrote:

><<Using the proxy can't resolve local names without
><<being fully qualified.
>
>What do you have in your proxy.cfg for
>DoNotCreateFullyQualifiedHostNames, if you have one?
>
>if is 1, then you will see this issue, but if it is 0, it should work.

Gonzalo.  Funny that you should mention it.  That is exactly the
problem.  But, here's the weird part, it has been set that way for at
least the last year and has been working just fine.  

><<The fact that this worked for years, still leads me to believe this is
>
><<a big, FAT, WRONG bug, but I can't get Novell to admit it
>
>I do not believe is a FAT, WRONG bug, but just the setting in the
>proxy.cfg file.

I'm thinking that somehow in the last upgrade the meaning of that
variable got switched.  I've been using Craig's series of proxy.cfg
files for some years now, and that has been set to 1 for some time.
Why it would croak now is beyond me.  I'm doing some more testing with
older versions of proxy.nlm now, to see if the behavior is different.

Will keep you posted.

Chris
0
Chris
4/29/2004 7:56:29 PM
Chris

<,Gonzalo.  Funny that you should mention it.  That is exactly the
<<problem.  But, here's the weird part, it has been set that way for at
<<least the last year and has been working just fine.

This switch was introduced time ago. If you have been using a proxy with
no code to handle this switch, no matter which was the setting in
proxy.cfg, it was not understand by proxy so ignored.

<<I'm thinking that somehow in the last upgrade the meaning of that
<<variable got switched.

The default value is 0, so if the switch is not present in proxy.cfg or
if present is set to 0, then it should work but if the switch is present
and the value is 1, then you will see the issue. I'll have to check from
which proxy version was this switch included but i'm sure is you remove
it or set it to 0, your problem will go away

Thanks

Gonzalo

0
Mysterious
4/29/2004 9:53:23 PM
In article <40917923.8DC778F6@globalxs.nl>, Mysterious wrote:
> This switch was introduced time ago. If you have been using a proxy with
> no code to handle this switch, no matter which was the setting in
> proxy.cfg, it was not understand by proxy so ignored.
>
Gonzalo,  I have been setting that value to 1 in proxy.cfg for years, but 
it appears that something changed in recent versions of proxy, because 
people that used to not have to append things to a URL have started having 
to do so, after applying a later NBM patch.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on 
BorderManager, go to http://www.craigjconsulting.com ***

0
Craig
5/2/2004 3:22:11 PM
Reply:

Similar Artilces:

What DNS server is used when using a proxy server?
Hey to all :) When you are using an anonymous proxy-server for the internet what happens with the translation of typed URLs to the IP address? What DNS server is used for the URL translation of the websites you visit? 1. The DNS server of your ISP or 2. the DNS server of the anonymous proxy server? Or in other words, who manages the URL translation for the visited websites: your ISP or the anonymous proxy server? Thanx in advance, Little Admin On Sun, 29 Feb 2004 10:45:32 +0100, Little Admin <i-do-not-have-email@hotmail.com> wrote: > When you are us...

BM proxy use other proxy server
Hi, We have set up BM 3.8 proxy to use other proxy (CERN). HTTP is ok, but it seems that the BM proxy is not sending HTTPS request to this proxy. When we try BM proxy directly to internet all is Ok. (both http and https) Any special setup for HTTPS to other proxy server?? Magne From a previous post of mine. (answered by Gonzalo) ability to sign into secure public web sites using SSL. > > This was an known issue.This is from one of the tids: > > 3.2.3 Proxy does not forward CONNECT requests > > If the ICP hierarchy with "Mus...

proxy to proxy
We will connect with our Bordermanager to an other proxy. but there is a syntax-problem our BM-Proxy will build the connection with(Trace) ....cyberbanking.bankkoop.ch:443/ HTTP/1.0..... but there should not be / according to RFC there is no "/" Slash allowed. Beat Brunner <<...cyberbanking.bankkoop.ch:443/ HTTP/1.0..... that has been fixed in the latest patches Gonzalo > <<...cyberbanking.bankkoop.ch:443/ HTTP/1.0..... > > that has been fixed in the latest patches > > Gonzalo > what do you meen with lastes patches ...

to proxy or not to proxy that is the ?
ok, i had jconect on NT and my AIX Sybase database on an RS/6000, so i used the proxy...fine. i have installed jconnect on the rs/6000, installed netscape fasttrack and i STILL have to use the proxy to avoid those -1 erro messages. does this mean that jConect always has to use that proxy no matter where anything lives? i am confused.... please enlighten me This is a multi-part message in MIME format. --------------6A7C6750A66874EBD6E2677A Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit If you remove the "proxy" connection property fro...

to Proxy or not to Proxy ?
Hi all, Could I ask for some opinions regarding using a proxy ? Here in the UK, I use Freeserve as my dial-up ISP. There is a web-cache proxy available for use if required, tho' IE6 works fine with or without (a small increase in page loads occurs if I use the proxy). The problem is, that if I use the proxy, then my Outpost Firewall logs only register connections to it, so I suffer from a serious lack of information about where my browser connections are going and what I could block (like adclick connections etc). I'm really not sure about the merits of with/without the pr...

Proxy to proxy
Hi. We use BM 3.8 as a proxy server and the main task is to restrict which url's the users can use. In the network there is another proxy server with internet access. Is it possible to setup BM to use another proxy server to connect to internet? And if yes, how ? Magne Absolutely. Search under "Cache Hierarchy Client". Basically....enable the client on the BM box, add you upstream proxy (Neighbor Hostname) add the correct port for the type of upstream proxy, add the type of proxy, usually you can just leave the priority at "1". looks like this...

How to configure proxy generated by VS.NET to use Proxy Server?
Is it possible to instruct the web service proxy code generated by VS.NET to use a proxy server for outbound traffic?  I'm pretty sure it is possible to manually edit the source code generated by VS.NET, but I don't want them to be overwritten everytime I sync with the WSDL.Thanks in advance.Jason Create a new derived class which inherits from proxy class and make all custom changes to the derived class.program against your derived class, that way where ever you will regenerate your proxy class, you changes in derived class will not be overriden.http://vikasnetdev.blogspot.c...

DBD::Proxy::db table_info failed: Server returned error: Failed to execute method CallMethod: Can't use string ("1") as an ARRAY ref while "strict refs" in use
------_=_NextPart_001_01C2BB46.4379CEA8 Content-Type: multipart/related; type="multipart/alternative"; boundary="----_=_NextPart_002_01C2BB46.4379CEA8" ------_=_NextPart_002_01C2BB46.4379CEA8 Content-Type: multipart/alternative; boundary="----_=_NextPart_003_01C2BB46.4379CEA8" ------_=_NextPart_003_01C2BB46.4379CEA8 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I'm having a problem using the table_info() via ProxyServer... I'm = getting the following error messages: I am us...

using DNS Benchmark behind a proxy server at work
Has anyone had any success/failures of using DNSB behind a proxy server? I am running Windows XP SP3. Our proxy server is a Novell Border Manager system with proxy filtering for http and https traffic. thanks in advance, Mike On Wed, 16 Jan 2013 14:07:49 +0400, mili@yahoo.com wrote: >Has anyone had any success/failures of using DNSB behind a proxy server? > >I am running Windows XP SP3. Our proxy server is a Novell Border Manager >system with proxy filtering for http and https traffic. Hi Mike, If UDP port 53 isn't allowed to the outside, I'd think i...

using WWW::Mechanize thru proxy to https(SSL) with website/form authentication, proxy error!!
--32398890-494149942-1321998190=:23922 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Here is the prob description in short:=0A=0A=0A1.=A0=A0=A0 post your url in= browser: https://myrel/files/file.doc=0A2.=A0=A0=A0 you get a logon page (= URL still looking same)=0A3.=A0=A0=A0 enter field names:=A0 username/passwo= rd=0A4.=A0=A0=A0 press 'ok' button (name =3D bsubmit)=0A=0A=A0=A0=A0 after = successful login:=0A5.=A0=A0=A0 you get new page:=A0=A0=A0 https://myurl/pa= gSuccess/=0A6.=A0=A0=A0 you have to click 'ok'=A0 ( field nam...

Proxy server detections for VPN users / proxy server switch
Name: Rasmus Jensen Email: rasmus141079atgmaildotcom Product: Firefox Summary: Proxy server detections for VPN users / proxy server switch Comments: Hi I'm using firefox on my work laptop computer, and are traveling once in a while where I stay at hotels. When connecting to the Internet on hotels or airports normally you will have to login via a homepage before Internet access is possible. This means that my VPN connections will not work, and therefore no connection to the proxy server. So I'll have to go into settings and turn off proxy server, then login on the h...

Adding DNS Server to existing DNS proxy
I currently have DNS proxy running on my BM server. I have a four-server environment. One "production", one "backup production", one BorderManager, one backup BM that keeps a VPN running even when it is not the BM server. I would like to add NAMED to at least my production server. Can I, as I have two DA's running, one each on the production and backup production servers, run NAMED on both my production and backup production servers? I would like to have as many things be automatic when we switch from the production to the backup server as possible, e...

superreview granted: [Bug 257758] Add UI for WPAD and option for using the configured SOCKS proxy for DNS lookups to proxy preferences : [Attachment 170779] Patch V1.3
Mike Shaver <shaver@mozilla.org> has granted Stefan Borggraefe <Stefan.Borggraefe@gmx.de>'s request for superreview: Bug 257758: Add UI for WPAD and option for using the configured SOCKS proxy for DNS lookups to proxy preferences https://bugzilla.mozilla.org/show_bug.cgi?id=257758 Attachment 170779: Patch V1.3 https://bugzilla.mozilla.org/attachment.cgi?id=170779&action=edit ------- Additional Comments from Mike Shaver <shaver@mozilla.org> sr=shaver. I had a slightly different redesign of the proxy pref panel in mind for firefox, but that flight of fancy...

superreview requested: [Bug 257758] Add UI for WPAD and option for using the configured SOCKS proxy for DNS lookups to proxy preferences : [Attachment 170779] Patch V1.3
Stefan Borggraefe <Stefan.Borggraefe@gmx.de> has asked Mike Shaver <shaver@mozilla.org> for superreview: Bug 257758: Add UI for WPAD and option for using the configured SOCKS proxy for DNS lookups to proxy preferences https://bugzilla.mozilla.org/show_bug.cgi?id=257758 Attachment 170779: Patch V1.3 https://bugzilla.mozilla.org/attachment.cgi?id=170779&action=edit ------- Additional Comments from Stefan Borggraefe <Stefan.Borggraefe@gmx.de> Neil is right. I made a mistake when testing the locked prefs. ...

Web resources about - DNS error on internal servers using proxy on workstation - novell.bordermanager.proxies

Workstation - Wikipedia, the free encyclopedia
This article is about the type of computer. For workstations in music production, see music workstation . For furniture, see cubicle and computer ...

Workstation - Wikipedia, the free encyclopedia
This article is about the type of computer. For workstations in music production, see music workstation . For furniture, see cubicle and computer ...

App Store - iCAS — Workstation-class scientific computing for iOS devices!
Get iCAS — Workstation-class scientific computing for iOS devices! on the App Store. See screenshots and ratings, and read customer reviews. ...

workstation - Flickr - Photo Sharing!
i tend to photograph trin from above. possibly because she is little. colour

Citrix WinFrame 1.8 upgrade from Windows NT 3.51 Workstation - YouTube
This is my recording of doing an in place upgrade of the elusive Citrix WinFrame 1.8 version of Windows NT 3.51. I was able to do an in place ...

Active workstations
Active workstations mean we can burn calories and stay active while we sit.

Active workstations
Active workstations mean we can burn calories and stay active while we sit.

Active workstations
Active workstations mean we can burn calories and stay active while we sit.

Active workstations
Active workstations mean we can burn calories and stay active while we sit.

Fusion-IO Brings Flash Madness To Workstations, And Movies Like 'Hugo'
... the founding member of the AllThingsD Flash Madness Club , last summer’s hot IPO , said today it is bringing its flash technology to workstations. ...

Resources last updated: 12/20/2015 2:21:42 AM