<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.19019">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2 face=Arial>Chris/Fleep</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>If all was well in your setup then Tests 1,2 &3
should work for both on and off campus users.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Off Campus being sent a local network address for
handshake implies that on the server system ucsim1.irc.uc.edu is resolving to
the local address instead of the external IP address. To work properly
both on-campus and off-campus need to be sent the external IP
address.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>On Campus failures in Tests 1 & 2 indicate that
NAT Loop-Back is not in effect. You don't appear to be reaching your
local server from on-campus using it's external IP address. However, if
the failure is at handshake and Loop-Back is in effect that suggests the UDP
port is open for the local address and blocked for the external
address.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Off Campus failures in Tests 1 & 2 suggest that
the TCP port is open while the UPD port is not (assuming failure is at
handshake.) I know you say they're verified open but this is what your
results indicate.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>- Gary</FONT></DIV>
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="FONT: 10pt arial; BACKGROUND: #e4e4e4; font-color: black"><B>From:</B>
<A title=fleep513@gmail.com href="mailto:fleep513@gmail.com">Fleep Tuque</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=opensim-users@lists.berlios.de
href="mailto:opensim-users@lists.berlios.de">opensim-users@lists.berlios.de</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, March 30, 2011
11:49</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [Opensim-users] NAT &
Corporate Firewall</DIV>
<DIV><BR></DIV>Yep no luck with that one either.
<DIV><BR>
<DIV>
<DIV>[University of Cincinnati]</DIV>
<DIV>RegionUUID = 5985af1b-4223-4a12-ba87-1c3830a44e97</DIV>
<DIV>Location = 9000,9000</DIV>
<DIV>InternalAddress = 0.0.0.0</DIV>
<DIV>InternalPort = 9000</DIV>
<DIV>AllowAlternatePorts = False</DIV>
<DIV>ExternalHostName = <A
href="http://ucsim1.irc.uc.edu">ucsim1.irc.uc.edu</A></DIV></DIV>
<DIV><BR></DIV>
<DIV>This is what I see on the opensim.log:
<DIV><BR></DIV>
<DIV>
<DIV>2011-03-30 11:44:07,114 DEBUG -
OpenSim.Region.CoreModules.ServiceConnectorsOut.Simulation.LocalSimulationConnectorModule
[LOCAL SIMULATION CONNECTOR]: Found region University of Cincinnati to send
SendCreateChildAgent</DIV>
<DIV>2011-03-30 11:44:07,118 INFO -
OpenSim.Region.Framework.Scenes.Scene [CONNECTION BEGIN]: Region University of
Cincinnati told of incoming root agent Fleep Tuque
883317bb-bcf1-4e5b-82f1-330f24fb32a7 (circuit code 871509482, teleportflags
128)</DIV>
<DIV>2011-03-30 11:44:07,344 INFO -
OpenSim.Region.Framework.Scenes.Scene [CONNECTION BEGIN]: Region University of
Cincinnati authenticated and authorized incoming root agent Fleep Tuque
883317bb-bcf1-4e5b-82f1-330f24fb32a7 (circuit code 871509482)</DIV>
<DIV>2011-03-30 11:44:07,348 DEBUG -
OpenSim.Region.CoreModules.Agent.Capabilities.CapabilitiesModule [CAPS]:
Reregistering caps for agent 883317bb-bcf1-4e5b-82f1-330f24fb32a7. Old
caps path e89d38e3-fc0c-4c17-bf91-2b0e73b89735, new caps path
00e226b9-6b4a-4025-974b-c813725f6b52. </DIV>
<DIV>2011-03-30 11:44:07,350 DEBUG - OpenSim.Framework.Capabilities.Caps
[CAPS]: Registered seed capability
/CAPS/00e226b9-6b4a-4025-974b-c813725f6b520000/ for
883317bb-bcf1-4e5b-82f1-330f24fb32a7</DIV>
<DIV>2011-03-30 11:44:07,353 DEBUG -
OpenSim.Region.CoreModules.Framework.EventQueue.EventQueueGetModule
[EVENTQUEUE]: Found Existing UUID!</DIV>
<DIV>2011-03-30 11:44:07,356 INFO -
OpenSim.Region.CoreModules.Avatar.ObjectCaps.ObjectAdd [OBJECTADD]:
/CAPS/OA/65e157bc-6345-4ab3-bd27-a9d9074b4768/</DIV>
<DIV>2011-03-30 11:44:07,359 INFO -
OpenSim.Region.CoreModules.Avatar.ObjectCaps.GetTextureModule [GETTEXTURE]:
/CAPS/30f93e03-8f90-45d7-a6ee-a8e3c9fda71f</DIV>
<DIV>2011-03-30 11:44:13,837 DEBUG - OpenSim.Framework.Capabilities.Caps
[CAPS]: Seed Caps Request in region: University of Cincinnati</DIV>
<DIV>2011-03-30 11:44:13,840 DEBUG - OpenSim.Region.Framework.Scenes.Scene
[SCENE]: Incoming client Fleep Tuque in region University of Cincinnati via
regular login. Client IP verification not performed.</DIV>
<DIV><BR></DIV>
<DIV>On the client side it gets to Region Handshake and then hangs..
Users from on campus are still able to log in though.</DIV>
<DIV><BR></DIV>
<DIV>- Chris /Fleep</DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV>Chris M. Collins (SL: Fleep Tuque)</DIV>
<DIV>Project Manager, UC Second Life </DIV>
<DIV>Second Life Ambassador, Ohio Learning Network </DIV>
<DIV>UCit Instructional & Research Computing</DIV>
<DIV>University of Cincinnati </DIV>
<DIV>406E Zimmer Hall</DIV>
<DIV>PO Box 210088</DIV>
<DIV>Cincinnati, OH 45221-0088</DIV>
<DIV>(513)556-3018</DIV>
<DIV><A href="mailto:chris.collins@uc.edu">chris.collins@uc.edu</A></DIV>
<DIV><BR></DIV>
<DIV>UC Second Life: <A
href="http://homepages.uc.edu/secondlife">http://homepages.uc.edu/secondlife</A></DIV>
<DIV>OLN Second Life: <A
href="http://www.oln.org/emerging_technologies/emtech.php">http://www.oln.org/emerging_technologies/emtech.php</A></DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV><BR></DIV><BR>
<DIV class=gmail_quote>On Wed, Mar 30, 2011 at 11:17 AM, Diva Canto <SPAN
dir=ltr><<A
href="mailto:diva@metaverseink.com">diva@metaverseink.com</A>></SPAN>
wrote:<BR>
<BLOCKQUOTE
style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote>
<DIV bgcolor="#ffffff" text="#000000">Try the missing
combination<BR>InternalAddress=0.0.0.0 ExternalHostName=<SPAN
style="LINE-HEIGHT: 19px; FONT-FAMILY: arial,helvetica,sans-serif; FONT-SIZE: 13px"></SPAN><A
href="http://ucsim1.irc.uc.edu" target=_blank>ucsim1.irc.uc.edu</A>
<DIV>
<DIV></DIV>
<DIV class=h5><BR><BR>On 3/30/2011 8:11 AM, Fleep Tuque wrote:
<BLOCKQUOTE type="cite">Hi Edmund,
<DIV><BR></DIV>
<DIV>Nod I've tried that permutation too, no luck. Here are the
combinations I've tried so far:</DIV>
<DIV><BR></DIV>
<DIV><SPAN
style="LINE-HEIGHT: 19px; FONT-FAMILY: arial,helvetica,sans-serif; FONT-SIZE: 13px"><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">Test
1: InternalAddress = 10.23.23.x ExternalHostName =
129.137.2.x</SPAN><BR><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">Result
On-Campus: FAIL Result Off-Campus: FAIL</SPAN><BR><BR>Test 2:
InternalAddress = 0.0.0.0 ExternalHostName = 129.137.2.x<BR>Result
On-Campus: FAIL Result Off-Campus: FAIL<BR><BR>Test 3: InternalAddress =
10.23.23.x ExternalHostName = <A href="http://ucsim1.irc.uc.edu"
target=_blank>ucsim1.irc.uc.edu</A><BR><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">Result
On-Campus: SUCCESS Result Off-Campus: FAIL</SPAN><BR><BR><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">Test
4: InternalAddress = <A href="http://ucsim1.irc.uc.edu"
target=_blank>ucsim1.irc.uc.edu</A> ExternalHostName = <A
href="http://ucsim1.irc.uc.edu"
target=_blank>ucsim1.irc.uc.edu</A></SPAN><BR><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">Result:
Opensim.exe crashes</SPAN></SPAN></DIV>
<DIV><SPAN
style="LINE-HEIGHT: 19px; FONT-FAMILY: arial,helvetica,sans-serif; FONT-SIZE: 13px"><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"><BR></SPAN></SPAN></DIV>
<DIV><SPAN
style="LINE-HEIGHT: 19px; FONT-FAMILY: arial,helvetica,sans-serif; FONT-SIZE: 13px"><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px">Leaving
at the default InternalAddress = 0.0.0.0 and ExternalHostName = SYSTEMIP
works for on campus users but not for off campus
users.</SPAN></SPAN></DIV>
<DIV><SPAN
style="LINE-HEIGHT: 19px; FONT-FAMILY: arial,helvetica,sans-serif; FONT-SIZE: 13px"><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"><BR></SPAN></SPAN></DIV>
<DIV><SPAN
style="LINE-HEIGHT: 19px; FONT-FAMILY: arial,helvetica,sans-serif">Has
anyone else run into this problem with a campus or corporate firewall?
How did you resolve it?</SPAN></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">Thanks again,</SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">- Chris</SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">Chris M. Collins (SL: Fleep
Tuque)</SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">Project Manager, UC Second
Life </SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">Second Life Ambassador, Ohio Learning
Network </SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">UCit Instructional & Research
Computing</SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">University of
Cincinnati </SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">406E Zimmer Hall</SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">PO Box 210088</SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">Cincinnati, OH 45221-0088</SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><A href="tel:%28513%29556-3018"
target=_blank>(513)556-3018</A></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><A href="mailto:chris.collins@uc.edu"
target=_blank>chris.collins@uc.edu</A></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">UC Second Life: <A
href="http://homepages.uc.edu/secondlife"
target=_blank>http://homepages.uc.edu/secondlife</A></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px">OLN Second Life: <A
href="http://www.oln.org/emerging_technologies/emtech.php"
target=_blank>http://www.oln.org/emerging_technologies/emtech.php</A></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT></DIV>
<DIV><FONT face="arial, helvetica,
sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT></DIV>
<DIV><SPAN
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 0px"></SPAN><FONT
face="arial, helvetica, sans-serif"><SPAN
style="LINE-HEIGHT: 19px"><BR></SPAN></FONT><BR>
<DIV class=gmail_quote>On Wed, Mar 30, 2011 at 11:03 AM, Edmund Edgar
<SPAN dir=ltr><<A href="mailto:lists@edochan.com"
target=_blank>lists@edochan.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE
style="BORDER-LEFT: rgb(204,204,204) 1px solid; MARGIN: 0pt 0pt 0pt 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote>Hi Fleep.<BR><BR>Maybe you've already tried this, but
I'd suggest setting<BR>ExternalHostName as your external IP
(129.137.2.x) rather than your<BR>hostname (<A
href="http://ucsim1.irc.uc.edu"
target=_blank>ucsim1.irc.uc.edu</A>).<BR><BR>Behind NAT, some places
(including Amazon EC2, I found) use an (IMHO<BR>evil) thing called Split
DNS (or "Split Brain DNS"), where the IP<BR>address you get inside the
firewall is different to the one you get<BR>outside your firewall. This
may be causing your OpenSim box to think<BR>that <A
href="http://ucsim1.irc.uc.edu" target=_blank>ucsim1.irc.uc.edu</A> is
10.23.23.x rather than 129.137.2.x.<BR><BR>HTH, let us know how you get
on.<BR>
<DIV><BR>On 30 March 2011 23:44, Fleep Tuque <<A
href="mailto:fleep513@gmail.com"
target=_blank>fleep513@gmail.com</A>> wrote:<BR>> the
client<BR>> correctly uses the external IP to communicate with the
robust server, but<BR>> after the authentication process, I see
the client trying to send packets to<BR>> the simulator machine's
internal IP (10.23.23.x) instead of an external IP<BR>> address
(129.137.2.x).<BR></DIV>> [snip]<BR>
<DIV>> In the region.ini file I've tried<BR>> various permutations
of the InternalAddress and ExternalHostName variables,<BR>> currently
InternalAddress is set to the internal IP 10.23.23.x and the<BR>>
ExternalHostName is set to the hostname <A
href="http://ucsim1.irc.uc.edu" target=_blank>ucsim1.irc.uc.edu</A> (the
box running<BR>> opensim.exe).<BR><BR></DIV>--<BR>Edmund
Edgar<BR>Founder, KK Social Minds<BR>Educational Technology for the Web
and Virtual Worlds<BR><BR><A href="mailto:ed@socialminds.jp"
target=_blank>ed@socialminds.jp</A><BR><A
href="tel:%2B81%20090%203912%203380" target=_blank>+81 090 3912
3380</A><BR>Skype: edmundedgar<BR>Second Life: Edmund Earp<BR>Linked In:
edmundedgar<BR>Twitter: @edmundedgar<BR><A
href="http://www.socialminds.jp"
target=_blank>http://www.socialminds.jp</A><BR>_______________________________________________<BR>Opensim-users
mailing list<BR><A href="mailto:Opensim-users@lists.berlios.de"
target=_blank>Opensim-users@lists.berlios.de</A><BR><A
href="https://lists.berlios.de/mailman/listinfo/opensim-users"
target=_blank>https://lists.berlios.de/mailman/listinfo/opensim-users</A><BR></BLOCKQUOTE></DIV><BR></DIV><PRE><FIELDSET></FIELDSET>
_______________________________________________
Opensim-users mailing list
<A href="mailto:Opensim-users@lists.berlios.de" target=_blank>Opensim-users@lists.berlios.de</A>
<A href="https://lists.berlios.de/mailman/listinfo/opensim-users" target=_blank>https://lists.berlios.de/mailman/listinfo/opensim-users</A>
</PRE></BLOCKQUOTE><BR></DIV></DIV></DIV><BR>_______________________________________________<BR>Opensim-users
mailing list<BR><A
href="mailto:Opensim-users@lists.berlios.de">Opensim-users@lists.berlios.de</A><BR><A
href="https://lists.berlios.de/mailman/listinfo/opensim-users"
target=_blank>https://lists.berlios.de/mailman/listinfo/opensim-users</A><BR><BR></BLOCKQUOTE></DIV><BR></DIV></DIV></DIV>
<P>
<HR>
<P></P>_______________________________________________<BR>Opensim-users
mailing
list<BR>Opensim-users@lists.berlios.de<BR>https://lists.berlios.de/mailman/listinfo/opensim-users<BR></BLOCKQUOTE></BODY></HTML>