|
NCBI Home IEB Home C Toolkit docs C++ Toolkit source browser C Toolkit source browser (2) |
NCBI C Toolkit Cross ReferenceC/doc/firewall.html |
source navigation diff markup identifier search freetext search file search |
1 <html> 2 <head> 3 <!-- put your site name between the title tags and uncomment 4 <title>Site Name</title> 5 --> 6 7 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> 8 <!-- if you use the following meta tags, uncomment them. 9 <META NAME="keywords" CONTENT="insert your keywords for the search engine"> 10 <META NAME="description" CONTENT="insert the description to be displayed by the search engine. Also searched by the search engine."> 11 --> 12 <link rel="stylesheet" href="http://www.ncbi.nlm.nih.gov/corehtml/ncbi2.css"> 13 </head> 14 15 16 <body bgcolor="#FFFFFF" background="http://www.ncbi.nlm.nih.gov/corehtml/bkgd.gif" text="#000000" link="#CC6600" vlink="#CC6600"> 17 <!-- the header --> 18 <table border="0" width="600" cellspacing="0" cellpadding="0"> 19 <tr> 20 <td width="140"><a href="http://www.ncbi.nlm.nih.gov"> <img src="http://www.ncbi.nlm.nih.gov/corehtml/left.GIF" width="130" height="45" border="0"></a></td> 21 <td width="360" class="head1" valign="BOTTOM"> <span class="H1">Network Configuration</span></td> 22 <td width="100" valign="BOTTOM"></td> 23 </tr> 24 </table> 25 <!-- the quicklinks bar --> 26 <table CLASS="TEXT" border="0" width="600" cellspacing="0" cellpadding="3" bgcolor="#000000"> 27 <tr CLASS="TEXT" align="CENTER"> 28 <td width="100"><a href="http://www.ncbi.nlm.nih.gov/PubMed/" class="BAR">PubMed</a></td> 29 <td width="100"><a href="http://www.ncbi.nlm.nih.gov/Entrez/" class="BAR">Entrez</a></td> 30 <td width="100"><a href="http://www.ncbi.nlm.nih.gov/BLAST/" class="BAR">BLAST</a></td> 31 <td width="100"><a href="http://www.ncbi.nlm.nih.gov/omim/" class="BAR">OMIM</a></td> 32 <td width="100"><a href="http://www.ncbi.nlm.nih.gov/Taxonomy/taxonomyhome.html" class="BAR">Taxonomy</a></td> 33 <td width="100"><a href="http://www.ncbi.nlm.nih.gov/Structure/" class="BAR">Structure</a></td> 34 </tr> 35 </table> 36 <!-- the contents --> 37 <table border="0" width="600" cellspacing="0" cellpadding="0"> 38 <tr valign="TOP"> <!-- left column --> 39 <td width="125"> 40 <img src="http://www.ncbi.nlm.nih.gov/corehtml/spacer10.GIF" width="125" height="1" border="0"> 41 42 43 </td> 44 <!-- extra column to force things over the gif border --> 45 <td width="15"><img src="http://www.ncbi.nlm.nih.gov/corehtml/spacer10.GIF" width="15" height="1" border="0"> </td> 46 <!-- right content column --> 47 <td width="460"> 48 <p> </p> 49 50 <p> 51 <i>Last modified:</i> $Date: 2009/10/28 00:49:46 $<br> 52 <i>Latest version: </i> 53 <a href="http://www.ncbi.nlm.nih.gov/IEB/ToolBox/NETWORK/firewall.html"> 54 http://www.ncbi.nlm.nih.gov/IEB/ToolBox/NETWORK/firewall.html</a> 55 56 57 <p> When first downloaded, your NCBI application runs in stand-alone mode, 58 without access to the network. However, your program can also be configured 59 to exchange information with the NCBI (GenBank) over the Internet. The 60 network-aware mode of your application is identical to the stand-alone 61 mode, but it contains some additional useful options. 62 <p> Your application can only function in its network-aware mode if the 63 computer on which it resides has a direct Internet connection. Electronic 64 mail access to the Internet is insufficient. In general, if you can install 65 and use a WWW-browser on your system, you should be able to install and 66 use the network. Check with your system administrator or Internet provider 67 if you are uncertain as to whether you have direct Internet connectivity. 68 <p> To launch the configuration form, select Net Configure under the Misc 69 menu in Sequin or Network Entrez, or the Options menu in Cn3D. If you are using 70 blastcl3, you must run Sequin, Network Entrez, or Cn3D first to configure blastcl3. This is 71 necessary because blastcl3 has no graphical user interface.<br> 72 <p align="center"> 73 <img src="firedialog.gif" align=bottom> 74 <br> 75 76 <p> 77 If you are not behind a firewall, set the <b>Connection</b> control to <b>Normal</b>. 78 If you also have a Domain Name Server (DNS) available, you can now simply press 79 <b>Accept</b>. 80 81 <p> 82 If DNS is not available, uncheck the <b>Domain Name Server</b> button. If you 83 are behind a firewall, set the <b>Connection</b> control to <b>Firewall</b>. 84 Both the <b>HTTP Proxy</b> and the <b>Non-transparent Proxy</b> boxes then become active. 85 If your site uses an HTTP proxy server, type in its address. (If you have DNS, it 86 can be of the form <tt>www.myproxy.myuniversity.edu</tt>; if you do not have DNS, you 87 should enter the numerical IP address of the form <tt>127.65.43.21</tt>.) 88 Once you type something in the <b>HTTP Proxy</b> box, the <b>HTTP Proxy Port</b> box 89 becomes active and can be filled in. 90 If your site has a non-transparent proxy server (a CERN-like proxy), enter 91 its name (or address) in the <b>Non-transparent Proxy</b> box. 92 Ask your network administrator for advice on the proper settings to use. 93 94 <p> 95 If you are in the United States, the default <b>Timeout</b> of 30 seconds should 96 suffice. From foreign countries with poor Internet connection to the U.S., you 97 can select up to 5 minutes as the timeout. 98 99 <p> 100 Finally, you will need to quit and restart your application in order for the network-aware 101 settings to take effect. 102 103 <p> 104 If you are behind a firewall, it must be configured correctly to access NCBI 105 services. Your network administrators may have done this already. If not, please 106 have them read the section below. 107 108 <p> 109 <a name="Settings"></a> 110 <b>The following section is intended for network administrators:</b> 111 112 <p> 113 Using NCBI services from behind a network security firewall requires opening 114 ports in your firewall. The ports to open are: 115 116 <p align="center"> 117 <pre> 118 Firewall Port IP Address 119 -------------------------------- 120 5860..5870 130.14.29.112 121 5860..5870 165.112.7.12 122 </pre> 123 124 <p> 125 If your firewall is not transparent, the firewall port number 126 should be mapped to the same port number on the external host. 127 128 <p> 129 Even though port 5860 may not routinely be made accessible to the public, 130 and is usually reserved for NCBI internal use only, it is recommended that 131 the port is kept open through the firewall just as all other ports from the range, 132 in case the public access will eventually be enabled on this port as well. 133 134 <p> 135 To see what ports are currently on, and their status, as reported within 136 NCBI, please refer to the following <a href="fwd_check.cgi">Firewall Daemon Presence 137 Check</a> page. Ports marked <b>INTERNAL</b> are solely for NCBI own use, and may be 138 inaccessible from your site. That, however, does not affect availability of any 139 services that NCBI provides through other (open) firewall ports. 140 141 <p> 142 TROUBLESHOOTING: You can test whether these special ports are connectable from 143 your host just by running simple <tt>telnet</tt> command (available on most 144 current systems). To know which ports, at the moment, you should be trying 145 from the list above (see the "Ports to open"), first check their status by visiting 146 <a href="fwd_check.cgi">Firewall Daemon Presence Check</a> link, then select any 147 up-and-running port and do the following (the example assumes port 5861 has 148 been shown in operational state): 149 <pre> 150 telnet 130.14.29.112 5861 151 </pre> 152 When connected, enter a line of arbitrary text (hitting the <Enter> 153 key alone also works): if everything is fine, the session will look as follows 154 (the line "test" is your input there): 155 156 <pre> 157 | > telnet 130.14.29.112 5861 158 | Trying 130.14.29.112... 159 | Connected to 130.14.29.112. 160 | Escape character is '^]'. 161 | test 162 | NCBI Firewall Daemon: Invalid ticket. Connection closed. 163 | Connection closed by foreign host. 164 </pre> 165 166 <p> 167 If your command cannot connect at all (e.g. it hangs then times out), or you see a different 168 response from what is shown above, it indicates that the port is not configured correctly. 169 170 <p> 171 <a href="http://www.ncbi.nlm.nih.gov/sites/entrez?db=Books">NCBI Bookshelf</a> provides more detailed <a 172 href="http://www.ncbi.nlm.nih.gov/bookshelf/br.fcgi?book=toolkit&part=ch_app#ch_app.Firewall_Daemon_FWDa">Firewall 173 Daemon Documentation</a>, and discusses its integration into the overall 174 functions of NCBI dispatching facilities. 175 176 <p> 177 There is also an auxiliary automated UNIX shell script 178 <a href="fwd_check.sh">fwd_check.sh</a> to check all of 179 the preset ports, and it is kept in-sync with currently 180 configured open ports (so remember to refresh your download 181 prior to actual use). 182 183 <p> 184 Note: Old NCBI clients used different application configuration settings and 185 ports than listed above. If you need to support such clients, which are now 186 obsolete, please contact <a href="mailto:info@ncbi.nlm.nih.gov"> 187 <tt>info@ncbi.nlm.nih.gov</tt></a> for further information. 188 <p> </p> 189 190 </td> 191 192 </tr> 193 </table> 194 <!-- end of content --> 195 196 197 </body> 198 </html>
|
This page was automatically generated by the
LXR engine.
Visit the LXR main site for more information. |