Re: [cobalt-users] [Qube 2] Firewall prohibits HTTPS connection

[Mike Vanecek <nospam99@xxxxxxxxxxxx>]

On Wed, 22 Nov 2000 11:26:12 -0500, "Andrew Fish" <afish@xxxxxxxxxxxxxxxxxxxx>
wrote:

:>We are having trouble connecting to an SSL server through HTTPS when the
:>firewall on our Qube 2 is active.  I have tried opening up port 443 (what I
:>understand is the needed port), allowing ingoing and outgoing connection
:>that mimick the other rules I have already set up that seem to work okay.

Just out of curiosity, I assume the ssl server is the one that came with the
shopping cart software and is not the one that Cobalt sells?

If it works with the filters off and does not work with the filters on, then
it has to be a problem with your filter settings. You might try a netstat -an
to see what ports are listening. Even though 443 is the standard ssl port, it
may be that the software you are using is listening on some other port. Should
you not find anything useful there, try editing the /etc/rc.d/init.d/ipfilters
file manually and turning on one set of filters at a time until you find the
set that is causing you problems. Just #comment them out. Do not use the GUI
since it will overwrite the entire ipfilters file. I am hoping the netstat
gives you the needed info, if not, a pain, but you need to identify the filter
that stopping the connection.

:>
:>I don't know if this matter, but our Qube does have a valid name in a DNS
:>server provided by our web host, not our ISP (we have a DSL connection). We
:>are using NAT to run our own private IP network, with the Qube using a
:>single IP address on the Internet.  When we try to access an HTTPS server
:>(e.g. for a shopping cart) the connection times out and IE reports it
:>"Cannot find server".
:>
:>Any suggestions as to a solution?

If it works with the filters off, then none of the above matters except for
its impact on how the filters are defined.

I'd be curious to know the answer once you find it.

HTHs.

Mike

:>
:>Thanks.
:>
:>Andrew Fish
:>Classic
:>
:>
:>_______________________________________________
:>cobalt-users mailing list
:>cobalt-users@xxxxxxxxxxxxxxx
:>To Subscribe or Unsubscribe, please go to:
:>http://list.cobalt.com/mailman/listinfo/cobalt-users