<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EstiloCorreioElectrnico18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>FQDN on externalhostname should be working<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Make sure you did not set a option </span><span style='font-size:9.5pt;font-family:Consolas;color:#A31515'>ResolveAddress to true<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:9.5pt;font-family:Consolas;color:#A31515'>Btw this was broken by mistake, but only for a few hours on master<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:9.5pt;font-family:Consolas;color:#A31515'>Think the issue did not reach any RC</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=PT style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=PT style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> opensim-users-bounces@opensimulator.org [mailto:opensim-users-bounces@opensimulator.org] <b>On Behalf Of </b>taalj<br><b>Sent:</b> Tuesday, May 23, 2017 20:36<br><b>To:</b> opensim-users@opensimulator.org<br><b>Cc:</b> Fred Beckhusen<br><b>Subject:</b> Re: [Opensim-users] Problems with teleporting in grid mode, from simulator instance to another instance? (Ferd)<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Hi Fred / et all,<o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>My Grid configuration is running behind a company firewall. So all service we provide are serviced by the company firewall. We dont want to advertise our internal IP addresses to the outside world. So we run an internal DNS server with all the internal network and an external DNS server to provide services to users on the internet. The Split DNS concept. In this way we make our Network configuration more secure beside all other security measures we do on the FW of course. By port forwarding we redirect the traffic from Internet to the right ports on the Grid or Region server. When I started to configure OpenSim I first use FQDN (host.domain.nl) and got the same result as mentioned by Tom. After monitoring the network I saw package that could not be resolved. <o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>For the internal network users and the users from internet you want the configuration to be transparent without have to use different configuration. The only solution to use OpenSim Grid in combination with split DNS and a FW is to use FQDN. Then the resolving of the internal and external DNS will result respectively in the internal IP address for internal users (for instance an address like 192.168.0.1) and the FW IP address for external users (for instance 47.185.237.187) with forwarding of ports to the internal servers. This configuration works for all services we provide but not for OpenSim's Region.ini. This configuration will only work when you put in the FW IP address.<o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Somehow there is something wrong in the resolving and accepting the FQDN in the Region.ini<o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>I think more and more OpenSim network will be behind FW and security system with split DNS and use internal un-routable IP ranges (class A: 10.x.x.x and class B: 192.168.x.x). Normally this configuration can work stand-alone. But when my FW is down the standalone grid will not work because of the external IP address in the Region.ini. When FQDN in the Region.ini are correctly resolved then internal users can work on the grid because it doesn't need the FW to connect to but use the internal DNS that resolve the FQDN to the internal IP address.<o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>So the FQDN in the Region.ini does not lead to the right IP (in this case internal IP address) it will result in a TP that is not working because the Regio Server can not be found.<o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>with regard,<o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Johan Taal<o:p></o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'><o:p> </o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'><o:p> </o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'><o:p> </o:p></span></p><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Fred Beckhusen schreef op 2017-05-23 20:36:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #1010FF 1.5pt;padding:0cm 0cm 0cm 5.0pt;margin-left:0cm;margin-right:0cm'><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>Johan Taal: You have an interesting comment that the FQDN should not be used on regions. Are you saying that the DNS system at the far end may have issues resolving it to an IP? Or that the LAN user cannot get to the region because their DNS server is not resolving, thus occasionally leading to Thomas Ringates flaky tp problem?<br><br><br>Tom:<br><br>Your region file looks fine. The Outbound Disallow looks correct, too. That's a good catch - an exception should be made to the use http:// 'rule'.<br><br>One minor point: I believe Maxprims = 10000 is meaningless without an economy module. It only reports that number to a osSL function for prims can check parcel limits. And the viewer stops at 45,000 no matter what you type in.<br><br>I have the same Linksys, too, and it works great for me.<br><br>Fred<br><br>_______________________________________________<br>Opensim-users mailing list<br><a href="mailto:Opensim-users@opensimulator.org">Opensim-users@opensimulator.org</a><br><a href="http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users">http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users</a><o:p></o:p></span></p></div></blockquote><p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'><o:p> </o:p></span></p></div></body></html>