-
1. Re: JMS Firewall problem using UIL
cmgharris Dec 18, 2002 9:27 AM (in response to andrew_maye)The thread "Re: JMS and firewalls - Is it possible?" on this forum speaks about the mapping in the hosts file, and as I read it, says you definitely shouldn't map the host name to 127.0.0.1. You might try it with the 'real' ip address instead.
Incidentally your post helped me sort out a problem I was having with this issue. Thanks.
Chris -
2. Re: JMS Firewall problem using UIL
andrew_maye Dec 18, 2002 9:44 AM (in response to andrew_maye)I've just been looking through the code for UILServerILService and other classes around it.
It appears to me that the local IP address of the machine is just passed through to the client (it does an InetAddress.getLocalHost).
In my server.log file I see the following:
2002-12-18 14:13:53,467 INFO [org.jboss.mq.il.oil.OILServerILService] Started
2002-12-18 14:13:53,467 INFO [org.jboss.mq.il.uil.UILServerILService] Starting
2002-12-18 14:13:53,467 INFO [org.jboss.mq.il.uil.UILServerILService] JBossMQ UIL service available at : 0.0.0.0/0.0.0.0:8091
Therefore I'm safe to assume that the following code gets executed in the startService method of UILServerILService.java:
if( socketAddress.toString().equals("0.0.0.0/0.0.0.0") )
socketAddress = InetAddress.getLocalHost();
serverIL = new UILServerIL(socketAddress, serverSocket.getLocalPort(), enableTcpNoDelay);
i.e. it will just get my local IP address. Looking through the other classes around here (SpyConnectionFactory, SpyConnection, GenericConnectionFactory, etc) I think that the "serverIL" object above just gets passed straight through to the client.
Does this mean that UIL does not work with NAT? My ADSL firewall/router unit is doing NAT.
Could someone please confirm if this is the case?
Thanks,
Andrew. -
3. Re: JMS Firewall problem using UIL
andrew_maye Dec 18, 2002 9:48 AM (in response to andrew_maye)> The thread "Re: JMS and firewalls - Is it possible?"
> on this forum speaks about the mapping in the hosts
> file, and as I read it, says you definitely shouldn't
> map the host name to 127.0.0.1. You might try it with
> the 'real' ip address instead.
I've tried all combinations I can think of:
1. 127.0.0.1
2. Nothing at all
3. 192.168.0.2 (by local IP address)
4. My external IP address
Any other suggestions most welcome!
I'm beginning to think it is to do with NAT not being dealt with by UIL. See my earlier follow-up in this thread.
> Incidentally your post helped me sort out a problem I
> was having with this issue. Thanks.
No problem. I thought I'd do a lengthy post with all the information I'd gathered from other places, since there seemed to be a lack of one post that contained everything you need to know.
> Chris
Cheers,
Andrew.