[ipac] HIP in DMZ. Is it necessary?

[Anne Scott(Library)]

Hi

You simply assign another IP to the machine and make sure that each
application only listens on the correct IP on port 80.  The usual
conflicts are with either Apache or IIS, and both are easy to customise.
You also make a similar change in HIP.  There may also be DNS and
firewall changes as appropriate.

The added advantage of a separate IP is that it makes it much easier to
move HIP to another machine is needed.

Eg

myserver.mylibrary.edu   123.123.123.1   
hip.mylibrary.edu        123.123.123.2

Apache or IIS can run on 123.123.123.1:80 and HIP on 123.123.123.2:80 on
the same machine.  You will need to change your web links to your
catalogue to http://hip.mylibrary.edu.  (It is also possible to redirect
the old url 123.123.123.1:8080)

It is best to ask Dynix for help.  These instructions can help for 3.0x
http://customer.dynix.com/archive/pdf/?support/ipac/tech/iPac202WebServG
uide.pdf.  

4.0x can also be modified to work, but the changes you need to add are
different.  I figured it out on our test 4.0 system but I cant remember
what I did.


Cheers

Anne


> My understanding is the reverse. When we first installed 
> ipac2.0/HIP we were told to use port 80, but found we 
> couldn't because port 80 was already in use for something 
> else (don't remember what that was). So SD staff told us just 
> to use 8080 instead; and it has caused problems for some 
> patrons with firewall issues, usually from the workplaces. I 
> sometimes wish we'd taken the time to move whatever it was 
> from port 80 to something else and use 80 for the HIP instead of 8080.
> 
> Tricia Brauer
> Cataloging Manager/Horizon System Administrator Round Rock 
> Public Library
> 216 E. Main St. 
> Round Rock, TX 78664
> 512-218-7007
> 512-218-7061 (fax)
> <triciab at round-rock.tx.us>
> Please note that our city has instituted a spam blocking 
> program. It is currently in its early stages, and some 
> business-related mails are being blocked. If I have not 
> responded to your email (and I almost always do), please 
> resend to my personal account at rrpls_na at yahoo.com . Foreign 
> emails, hotmail accounts, and some yahoo and .org accounts 
> are the common extensions being blocked. I am sorry for this 
> inconvenience.
> 
> 
> -----Original Message-----
> From: ipac-bounces at lists.tblc.org [mailto:ipac-bounces at lists.tblc.org]
> On Behalf Of Anne Scott(Library)
> Sent: Thursday, October 26, 2006 2:02 PM
> To: Dynix's Horizon Information Portal, formerly iPac (discussion)
> Subject: RE: [ipac] HIP in DMZ. Is it necessary?
> 
> Hi
> 
> HIP by default is setup to run on port 8080.  This causes 
> firewall problems for some borrowers.  It should always be 
> changed to run on port 80.  This is reasonably easy to do and 
> there are instructions for 3.0x on the SirsiDynix web for 
> both IIS and Apache.  Otherwise ask Dynix to do it for you.
> 
> Cheers
> 
> Anne
> 
> 
> ****************************************************************
> Anne Scott             anne.scott at canterbury.ac.nz       
> Library IT Manager
> Library
> University of Canterbury,  Te Whare Wananga o Waitaha 
> ph  64 3 364 2038    fax 64 3 364 2055
> 
> (mail : Library, Private Bag 4800, 
>         University of Canterbury, Christchurch 8140, New Zealand
> **************************************************************** 
> 
>  
> 
> _______________________________________________
> ipac mailing list
> ipac at lists.tblc.org
> http://lists.tblc.org/mailman/listinfo/ipac
> 
> _______________________________________________
> ipac mailing list
> ipac at lists.tblc.org
> http://lists.tblc.org/mailman/listinfo/ipac
>