Tracy Farmer | 21 Jun 2012 19:14

RE:Seeing internal IP addresses

Our your IP addresses world routable?  If so, then there is a firewall configuration issue.

 

Tracy

 

From: Michael Waldman [mailto:michael.waldman <at> baruch.cuny.edu]
Sent: Thursday, June 21, 2012 11:57 AM
To: EZProxy discussion list
Subject: [ezproxy] Seeing internal IP addresses

 

Please forgive my ignorance here - We are trying to figure out why our Books24x7 links are not working and the vendor did an IP analysis that revealed many internal IP addresses – not the ones we share with the vendor. Our network person thinks it is a security risk. Has anyone experienced this?

 

Thanks,

 

Michael

 

 

Michael Waldman

Head, Collection Management

Associate Professor

Baruch College Library

151 East 25th Street

New York,  NY 10010

646-312-1689 (V)/646-312-1691 (F)

Michael.Waldman <at> baruch.cuny.edu

 

You are currently subscribed to ezproxy as: tfarmer <at> astate.edu.
To unsubscribe, send request to scacad <at> itec.suny.edu

You are currently subscribed to ezproxy as: gee-ezproxy2 <at> m.gmane.org.
To unsubscribe, send request to scacad <at> itec.suny.edu

Chris Young | 21 Jun 2012 19:23

RE: Seeing internal IP addresses

Michael-

 

Not knowing your setup, I can only speculate but if you are using Exclude IP directives for authentication and a VPN to allow access from the outside of the IP range registered with the vendor, the VPN must be set up to route all traffic through it, not just the traffic destined for the Campus LAN.

 

It will increase the traffic that the VPN sees to include the “other” places that users may roam but will keep the subscription communications going through the correct networks.

 

What happens is that you are authenticated because the address that the VPN presents to the EzProxy is an internal address.  The Exclude IP directive removes the EzProxy from the conversation from that point on.  When this happens, you get authenticated but then the consumers browser then talks directly to the vendor.  This is usually what gives you the non-routable, internal addresses.

 

Hope this helps.  Good Luck!

 

Thanks,

 

Chris

 

Chris Young

Associate Director for Information Technology and Business Development

 

Houston Academy of Medicine-Texas Medical Center Library

1133 John Freeman Blvd., Houston TX 77030

P: 713.799.7803    F: 713-799-7830

chris.young <at> library.tmc.edu

 

www.library.tmc.edu

 

From: Michael Waldman [mailto:michael.waldman <at> baruch.cuny.edu]
Sent: Thursday, June 21, 2012 11:57 AM
To: EZProxy discussion list
Subject: [ezproxy] Seeing internal IP addresses

 

Please forgive my ignorance here - We are trying to figure out why our Books24x7 links are not working and the vendor did an IP analysis that revealed many internal IP addresses – not the ones we share with the vendor. Our network person thinks it is a security risk. Has anyone experienced this?

 

Thanks,

 

Michael

 

 

Michael Waldman

Head, Collection Management

Associate Professor

Baruch College Library

151 East 25th Street

New York,  NY 10010

646-312-1689 (V)/646-312-1691 (F)

Michael.Waldman <at> baruch.cuny.edu

 

You are currently subscribed to ezproxy as: chris.young <at> exch.library.tmc.edu.
To unsubscribe, send request to scacad <at> itec.suny.edu

You are currently subscribed to ezproxy as: gee-ezproxy2 <at> m.gmane.org.
To unsubscribe, send request to scacad <at> itec.suny.edu


Gmane