[JDEV] Firewall jumping

Thomas Charron tcharron at ductape.net
Thu Jan 20 15:13:49 CST 2000


Quoting "Michael D. Johnson" <mike_johnson at credence.com>:
> I played around with the telnet connection to the firewall yesterday on
> port 80 and what you propose definately looks like it would work well,
> both in form and content.

  Yep, it should work perfectly..

> Lets see if my understanding agrees with yours:

> 1. jserver establishes a socket connection between port 5280 on the
> local machine and port 80 of the firewall with a conection request.

  In my examples, it was the Client inside the firewall that would connect to 
jserver outside the firewall via 5280, client<=>Firewall<=>JServer.  But a 
simular method could be used for etherx<=>firewall<=>etherx communications as 
well..

> 2. A client connects to jserver and asks for the http service

  Well, the http service is designated by the port number used, which is why 
5280 is different then 5222..  ;-P

> 3. A HTTP session restricted to GET, PUT, and POST buffered XML messages
> passes to the other jservers using their URLs

  It could be, in a server<=>server example.  In a client<=>server example, 
which would be simplest for the moment, the client would pass to the jserver 
URL, which, in our example, could basically be 
http://jabber.org:5280/conversation

> 4. After a specified time, if the client doesn't pass any messages, the
> client is timed out and the session is closed.

  Bingo.  And we'd have something to deal with if the client connects after the 
timeout has expired, aka, if it keeps a list of the data for a half hour or so, 
so while not actively logged on, the server could resume the connection if it 
does hear back from the client..

--- 
Thomas Charron
<< Wanted: One decent sig >>
<< Preferably litle used  >>
<< and stored in garage.  ?>>




More information about the JDev mailing list