Re: Regarding source port configuration

Hi,

On 11/28/07, Nj, Raghunandan (NSN - IN/India - MiniMD)
<[email protected]> wrote:
> Hello,
>
> What is possible already?
> A firewall is setup between the server and the agent.
> The agent is preconfigured with its own RMI registry port (agent_reg_port)
> and listening port (agent_lis_port).
> The server is preconfigured with its own RMI registry port (ser_reg_port)
> and listening port (ser_lis_port).
> The firewall is configured in this way –
>
> Inbound connections to server come only on ser_lis_port
> Inbound connections to agent come only on agent_lis_port
> These ports should be opened in the respective directions. Additionally the
> two ports - agent_reg_port  and ser_reg_port should also be opened.
>
> The  RMI registry ports and Listening ports of both Server and Agent can be
> configured. This ensures that the server and agent are not reachable on any
> other incoming port other than those configured for them.
>
> What is not possible !
> In order to reach the server on its specified port, the agent JMX interface
> uses an arbitrary source port which cannot be controlled.
>
> In order to reach the agent on its specified port, the server JMX interface
> uses an arbitrary source port which cannot be controlled.
>
> The limitation is posed by the JMX interface and not otherwise.
> The arbitrary source port is only used by the JMX interface for reaching the
> destination port. The response does not come back to the arbitrary source
> port, but it goes to the configured listening port of the server or the
> agent as the case may be.
>
> So, how can we configure the source port from which the agent/server
> connects to a preconfigured port on agent/server in the firewall?

I am not sure I understood your email, sorry.
In JMX, normally "agent" and "server" refer to circa the same thing,
so I guess it's better that you rephrase your email using "client" and
"server".

It would also be helpful that you post your JMXServiceURLs.

Simon
-- 
http://bordet.blogspot.com
-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Mx4j-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mx4j-user