<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Hello Philippe!</div><div><br></div><div>I believe that Fleep has covered most of the issues and provided a possible solution. I think Fleep is quite right: I had a similar error as you had and couldn't log in.</div><div><br></div><div>Here was my problem: I have an OpenSim grid behind a firewall on a Linux server, with private IP addresses (10.X.X.X, just like you). I wanted local users, who also have IP addresses in the same range, to connect to OpenSim locally without going through the router. But, at the same time, I thought it would be nice to give external visitors the ability to log in from the outside.</div><div><br></div><div>So I did the following configuration: I put a 10.x.x.x address on the InternalAddress and ExternalHostName = opensim.betatechnologies.info. Then, <b>on that server</b>, I added an entry on /etc/hosts to point opensim.betatechnologies.info to 10.x.x.x; externally, on the "real" DNS server, opensim.betatechnologies.info would of course point to a real IP address (which would be translated via NAT on the router to 10.x.x.x). So local users could login with the LoginURI set to <a href="http://10.x.x.x:8002/">http://10.x.x.x:8002/</a> and the external visitors would use http://opensim.betatechnologies.info:8002/</div><div><br></div><div>OpenSim launched perfectly, and local users could log in. But external visitors cannot. On close inspection, I saw that, no matter where the user would come from, they would get a 10.x.x.x address, and, of course, external users would not be able to connect to that!</div><div><br></div><div>Why? As Fleep explained, when OpenSim launches, it resolves all addresses before running. So what was happening is that the Linux server would ask for the IP address of opensim.betatechnologies.info, look it up on /etc/hosts, find it to be 10.x.x.x, and that's what it would use from now on, forever. It would never be aware of the "external", real IP address.</div><div><br></div><div>Clearly this doesn't work! So at the end I had to delete the entry on /etc/hosts, make sure that the server and all internal LAN clients would resolve opensim.betatechnologies.info correctly to a real IP address, and that configuration worked fine. Of course, this means that communications inside the LAN will go through the router twice (as opposed to staying inside the LAN…) since clients have no idea that opensim.betatechnologies.info, with an external IP address, is actually being forwarded to an internal, private address (some high-end routers, like the ones from Cisco, are sometimes able to figure that out and add an ARP entry on the router to avoid those kinds of double-connections; simple routers, however, don't do that kind of "magic").</div><div><br></div><div>So Fleep is right. You have to make sure, in your case, that when OpenSim launches, <a href="http://os-reg.open-dsi.net">os-reg.open-dsi.net</a> is really pointing to a valid, external, real IP address, and not to an "internal" private address, or else your setup won't work…</div><div><br></div><div>Good luck,</div><div><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>- Gwyn</div><div><br><div><div>On 24/08/2012, at 11:18, Philippe Scoffoni wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
<div bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
I'm experiencing some problem with access to a region. I'm using
OpenSim 0.7.3 on Debian 6 with Mono from the Debian repository.<br>
<br>
I'm working with a server using openvz container. I'm using two
virtual machine. One for the grid and an other for the region. <br>
The VM are on a private network. It means, they have a private IP.
The grid : 10.0.0.10 and the region : 10.0.0.11. <br>
On the physical host, I'm using shorewall to build the rules of the
firewall and make the NAT Translation for all the required port
(9000TCP/UDP for the region , 8002TCP for the grid)<br>
In the Regions.ini, i've put in the ExternalHostName :
<a href="http://os-reg.open-dsi.net">os-reg.open-dsi.net</a> wich is the public IP I'm using to access to the
two vms.<br>
All seems to work fine. When I start the region, it is successfully
registred by the grid.<br>
My problem occurs when I try to connect to the region. My account is
succesfully authentified by the grid, but it seems that firestorm
(4.1.1) is not able to connect to the region. In the log there is
something like<br>
<br>
2012-08-24T09:18:27Z INFO: newview/llworld.cpp(181) : addRegion: Add
region with handle: 1099511628032000 on host 10.0.0.11:9000<br>
2012-08-24T09:18:27Z INFO: newview/llworld.cpp(214) : addRegion:
Adding new region (1000:1000)<br>
2012-08-24T09:18:27Z INFO: newview/llworld.cpp(215) : addRegion:
Host: 10.0.0.11:9000<br>
2012-08-24T09:18:27Z INFO: newview/llstartup.cpp(1503) :
idle_startup: Adding initial simulator { 256000.0, 256000.0, 0.0 }<br>
2012-08-24T09:18:27Z INFO: newview/llviewerregion.cpp(1586) :
setSeedCapability: posting to seed
<a class="moz-txt-link-freetext" href="http://os-reg.open-dsi.net:9000/CAPS/005f52b3-5440-4775-97df-a1fd5117be9c0000/">http://os-reg.open-dsi.net:9000/CAPS/005f52b3-5440-4775-97df-a1fd5117be9c0000/</a><br>
2012-08-24T09:18:27Z INFO: newview/llagent.cpp(781) :
LLAgent::setRegion: Moving agent into region: located at
10.0.0.11:9000<br>
<br>
<b>I d'ont understant why he is using the private IP</b>. On an
other lines, he use the ExternalHostName.<br>
<br>
or<br>
<br>
2012-08-24T09:18:27Z INFO: newview/lleventpoll.cpp(140) :
LLEventPollResponder: LLEventPoll initialized with sender
10.0.0.11:9000<br>
<br>
The last lines befoer the error message<br>
<br>
2012-08-24T09:18:31Z INFO: newview/llstartup.cpp(1735) :
idle_startup: viewer: UserLoginLocationReply() Enabling
10.0.0.11:9000 with code 1940142022<br>
2012-08-24T09:18:32Z INFO: llcommon/llprocess.cpp(692) :
LLProcess::LLProcess: SLVoice (7733): launched cd
/opt/Phoenix_Firestorm-Release_i686_4.1.1.28744:
/opt/Phoenix_Firestorm-Release_i686_4.1.1.28744/bin/SLVoice -ll -1<br>
2012-08-24T09:18:32Z WARNING: newview/lltexturefetch.cpp(1281) :
doWork: Texture missing from server (404):
<a class="moz-txt-link-freetext" href="http://os-reg.open-dsi.net:9000/CAPS/98b0e679-146d-4373-bfcd-94c669305532//?texture_id=cce0f112-878f-4586-a2e2-a8f104bba271">http://os-reg.open-dsi.net:9000/CAPS/98b0e679-146d-4373-bfcd-94c669305532//?texture_id=cce0f112-878f-4586-a2e2-a8f104bba271</a><br>
2012-08-24T09:18:52Z WARNING: newview/llstartup.cpp(2597) :
use_circuit_callback: Backing up to login screen!<br>
2012-08-24T09:18:52Z WARNING: newview/lltoastalertpanel.cpp(181) :
LLToastAlertPanel::LLToastAlertPanel: Alert: Nous avons des
difficultés à vous connecter. Il y a peut-être un problème avec
votre connexion Internet ou la Grille de Second Life.Vérifiez votre
connexion Internet et réessayez dans quelques minutes, cliquez sur
Aide pour consulter la page Portail Assistance Second Life ou bien
sur Téléporter pour essayer d'aller chez vous.<br>
2012-08-24T09:18:52Z INFO: newview/llworld.cpp(318) : removeRegion:
Removing region 256000.0:256000.0<br>
<br>
The complete log is on this pastebin<br>
<a class="moz-txt-link-freetext" href="http://pastebin.com/UGA7iH1E">http://pastebin.com/UGA7iH1E</a><br>
<br>
The region configuration<br>
<a class="moz-txt-link-freetext" href="http://pastebin.com/xe3mDYdV">http://pastebin.com/xe3mDYdV</a><br>
<br>
I'm not sure that you will understand my poor english :-) . <br>
<br>
Thanks<br>
<br>
Philippe<br>
</div>
_______________________________________________<br>Opensim-users mailing list<br><a href="mailto:Opensim-users@lists.berlios.de">Opensim-users@lists.berlios.de</a><br>https://lists.berlios.de/mailman/listinfo/opensim-users</blockquote></div><br></div><br><br><div>
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">--</font></p><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">"I'm not building a game. I'm building a new country."</font></p><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica"><span class="Apple-converted-space"> <span class="Apple-converted-space"> </span></span>-- Philip "Linden" Rosedale, interview to Wired, 2004-05-08</font></p><br class="khtml-block-placeholder"></span></span></span>
</div>
<br></body></html>