To prepare the proxy server for Internet access, verify that the following prerequisites have been met:
DNS Resolver setup was performed at the time of Novell® BorderManager® installation, to provide a valid domain name for the DNS, and an IP address of at least one DNS name server to resolve the IP hostnames. For more information on setting up the DNS Resolver, see Section 1.1, Setting Up the DNS Resolver.
Packet filtering is configured to allow DNS query and response packets.
The default installation sets packet filtering to block all incoming and outgoing traffic.
To modify the packet filtering setup, refer to Section 9.0, Setting Up Packet Filters.
Corporate users who want to use Proxy Services to access Web sites have set up their Web browsers to use the Novell BorderManager proxy server. For more information, see Section 1.2, Configuring Web Browsers to Use Novell BorderManager
Novell Public Key Infrastructure (PKI) Services and Secure Authentication Service (SAS) should be installed on the server to support Secure Sockets Layer (SSL) authentication of SOCKS 5 clients.
PKI and SAS are installed automatically during Novell BorderManager installation if the services have not been previously installed.
After SAS and PKI are installed, you must use the PKI snap-in to NetWare® Administrator to perform following SSL-related administrative tasks:
Importing certificates signed by an external Certificate Authority (CA)
Creating and managing Key Material Objects (KMOs) used to store key pairs in NDS® or Novell eDirectory™
Creating an NDS or eDirectory tree CA to sign certificates used on a private network
Refer to the Novell PKI online help in NetWare Administrator for the procedures to create and manage NDS or eDirectory tree CAs and KMOs.
Before you set up Proxy Services, ensure that you have the following information at hand:
The IP addresses of your server’s IP interfaces with the private or public interfaces identified.
The port number (8080 by default) and the hostname or IP address of the Novell BorderManager proxy server.
This section has the following information: