Comments on: External Network Unification Part 5: Almost There http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there.html Big, Honkin' Systems Stuff Mon, 09 Jan 2012 19:19:37 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: systemsboy http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there.html/comment-page-1#comment-692 systemsboy Thu, 19 Jul 2007 15:48:00 +0000 http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there/#comment-692 Pgreer,<br/><br/>I'll have to get back to you on that. I'm not currently at my office and can't access the settings. I will say that, at the outset, you'll need SSH ports (22) open. The first sync happens over SSH. Subsequent syncs do not. Therefore I recommend setting the replica up with all ports open initially, then locking things down after the first sync. This is what we did, and it was much easier.<br/><br/>Also, I remember that our DMZ is fully accessible (for the most part) from our internal network, but not vice-versa. This is pretty essential. Also that the replica on the DMZ is completely blocked from any traffic from the Big Bad Internet by our DMZ firewall. You can probably close most ports on the replica as well if you want to (I recommend it as an extra layer of security).<br/><br/>Again, when I get back in the office in a few weeks I'll try to remember to send you the firewall setup info. If you don't hear from me by the first week in August, and if you still haven't figured it out, post another comment to remind me.<br/><br/>Oh, this Apple KBase article may be of some help to you as well:<br/><a HREF="http://docs.info.apple.com/article.html?artnum=106439" REL="nofollow">Well-Known TCP and UDP Ports</a><br/><br/>-systemsboy Pgreer,

I’ll have to get back to you on that. I’m not currently at my office and can’t access the settings. I will say that, at the outset, you’ll need SSH ports (22) open. The first sync happens over SSH. Subsequent syncs do not. Therefore I recommend setting the replica up with all ports open initially, then locking things down after the first sync. This is what we did, and it was much easier.

Also, I remember that our DMZ is fully accessible (for the most part) from our internal network, but not vice-versa. This is pretty essential. Also that the replica on the DMZ is completely blocked from any traffic from the Big Bad Internet by our DMZ firewall. You can probably close most ports on the replica as well if you want to (I recommend it as an extra layer of security).

Again, when I get back in the office in a few weeks I’ll try to remember to send you the firewall setup info. If you don’t hear from me by the first week in August, and if you still haven’t figured it out, post another comment to remind me.

Oh, this Apple KBase article may be of some help to you as well:
Well-Known TCP and UDP Ports

-systemsboy

]]> By: pgreer http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there.html/comment-page-1#comment-691 pgreer Tue, 17 Jul 2007 14:20:00 +0000 http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there/#comment-691 could you send me some info on how you setup the machine to be a replica in the dmz? like what ports do you have open, etc.<br/><br/>I am trying to set up almost the same system at my work place.<br/><br/>mail to pgreer(at)mac(dot)com could you send me some info on how you setup the machine to be a replica in the dmz? like what ports do you have open, etc.

I am trying to set up almost the same system at my work place.

mail to pgreer(at)mac(dot)com

]]> By: systemsboy http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there.html/comment-page-1#comment-690 systemsboy Mon, 02 Jul 2007 18:36:00 +0000 http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there/#comment-690 Thanks MatX! We're pretty pleased with ourselves.<br/><br/>-systemsboy Thanks MatX! We’re pretty pleased with ourselves.

-systemsboy

]]> By: matx http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there.html/comment-page-1#comment-689 matx Sun, 01 Jul 2007 05:25:00 +0000 http://systemsboy.com/2007/06/external-network-unification-part-5-almost-there/#comment-689 Great work. Super duper awesome tight integration. Great work. Super duper awesome tight integration.

]]>