Frequently Asked Questions

I cannot "ping" thishost.outside.far

No, you cannot. Traceroute also is not available.

I need to use ssh to connect to this remote site

No problem, you have to use a ssh-client program internally. The firewall must not be involved in the process. At the ESRF on the NICE cluster, ssh corresponds to ssh Version 2 while ssh1 directs to ssh Version 1. Both versions are not compatible, ssh Version 1 should be tried if ssh Version 2 fails.

When I ssh firewall.esrf.fr, I get either no answer or a "Connection refused" message

You probably forgot to set the port number using the -p option (see Ssh section for details)

You may also use a ssh version 1 client program, while the firewall only stands version 2. Please use a version 2 client program (e.g. on Linux ssh -2 -p 5022 firewall.esrf.fr

My workstation MUST be accessible from outside

Sorry, we cannot do it. Your workstation can access the outside world, but the other way is prohibited. If somebody outside needs data residing on your workstation's disk, please look at the item below.

Exporting data to a remote recipient

See the User's Manual section, Ftp subsection.

Importing data from a remote source

See the User's Manual section, Ftp subsection.

My software supplier gives me a restricted access on his Ftp server, but needs an IP address

Give him the IP address of the firewall, i.e. 193.49.43.1, and use the out's proxy (ftp out).

My software supplier gives me a restricted access on his Web server, but needs an IP address

Give him the IP addresses of the internal Web/Cache servers, e.g. 160.103.2.223, 160.103.2.224 (this may be subject to changes).

This service does not work.

Some network services are not supported, especially those based on UDP such as NFS, and those involving incoming TCP connections. See the Unsupported services section above for more details.

This document was originally developed at TIS (Trusted Information Systems). Copyright in this document is retained by Trusted Information Systems. Inc. The ESRF integrated this HTML document as the User's Manual section of this Web page, after a deep adaptation to our site's environment and constraints.