Firewall access to secondary IP's
Novell Cool Solutions: Question & Answer
Q:
I need to be able to allow my users behind the firewall access to a public /
secondary IP on one of our servers, so they can access iFolder from behind the firewall. Is this possible? Currently, workstations behind the firewall can ping the second server's public IP but not the secondary IP.
A:
NBM does not allow the "bouncing" (NAT LoopBack) of addressees back inside it, so your plan would not work. As an alternative, your users could always go to a DNS target and not an IP number. That way, you'd have a consistent name inside and out, just different IP numbers targeted.
If your external DNS is independent of the internal DNS, you can use the same A record, both inside and out.
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com