Refer: https://fabianlee.org/2017/02/23/squid-controlling-network-access-using-squid-and-whitelisted-domains/
Getting Ubuntu to Update Behind Firewall
This worked
Sample Error:
Err:70 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages 503 Service Unavailable [IP: 91.189.88.161 80]
Refer: https://askubuntu.com/questions/26528/error-503-service-unavailable-when-using-apt-get-update-behind-proxy
$ sudo su -
$ echo 'Acquire { http::User-Agent "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36"; };' >> /etc/apt/apt.conf
You could also just update the apt.conf file in place instead of using the echo command.
In case you cannot update from a repository, you can select the best mirror possible.
Ideas to try:
- Get keys manually - http://redcrackle.com/blog/how-add-ubuntu-apt-get-key-behind-firewall
- Adding a repository to use port 80 - https://gist.github.com/maciakl/4531580
Firewall Changes for ezAir
From: Lee, Scott (HAL)
Sent: Wednesday, March 07, 2012 10:14 AM
To: Doan, Thomas (HAL Contractor)
Cc: Ruckman, Maurice (HAL)
Subject: RE: EZAir firewall changes
The details are as follows:
asa1.inet firewall: src 10.194.50.9/24, dest webservices.sabre.com, port https
From: Doan, Thomas (HAL Contractor)
Sent: Wednesday, March 07, 2012 10:09 AM
To: Lee, Scott (HAL)
Cc: Ruckman, Maurice (HAL)
Subject: EZAir firewall changes
Hi Scott,
I am following up on the EZAir firewall changes done recently and trying to document the details and procedures for future reference. When you get a chance, can you provide me the network hardware names and details of firewall rules for this? This will help us properly fill out the WO and change request form for next time.
Thanks,
Thomas
Application unavailable, firewall iptables activated and blocking all activity
From: Schumacher, Mike (HAL)
Sent: Tuesday, February 14, 2012 3:52 PM
To: Ruckman, Maurice (HAL); McConnell, Chris (HAL Contractor)
Cc: HAL DistList: IS UNIX; Augustine, Anila (HAL)
Subject: RE: ezAir application URL does not work anymore
Maurice,
Can you try the ezair test again. On the second link I’m getting an error.
Linux firewalls are NOT your friend!!! When Harold rebooted the server on Friday iptables started and was blocking all traffic.
Mike
From: Ruckman, Maurice (HAL)
Sent: Tuesday, February 14, 2012 8:57 AM
To: McConnell, Chris (HAL Contractor)
Cc: HAL DistList: IS UNIX; Augustine, Anila (HAL)
Subject: ezAir application URL does not work anymore
Importance: High
I can get to the admin console, but the link to the ezAir webapp no longer works:
Links that used to work on Friday:
http://haltstapp03/airadmin/login
https://ht.hq.halw.com/airadmin
I don’t know if this is related to the SSL problems we’ve been having, but any help would be much appreciated.
Other Stuff:
I had the Dave give permissions to the user in the database to hopefully fix the problem, no luck, we may need to delete some transaction files listed in the article instead:
http://www-01.ibm.com/support/docview.wss?uid=swg21196663
Excerpt:
To remove the transaction logs, do the following:
(1) Stop the server.
(2) Delete the 'transaction' folder and all subdirectories.
(3) Restart the server.
The above exceptions will no longer occur.
From: Risley, David (HAL)
Sent: Tuesday, February 14, 2012 8:39 AM
To: Risley, David (HAL); Ruckman, Maurice (HAL); HAL Service Request Center (HAL)
Cc: HAL DistList: IS DBA; Augustine, Anila (HAL); Harrington, Scott (HAL Contractor); Fernan, Diana (HAL Contractor); Tonks, Kristen (HAL); Konar, Tara (PCL)
Subject: RE: Please Open ticket for EZAIR Database on WebTst with DBA's
Grants made to user EZAIR in database TSTWEB
grant select on pending_trans$ to ezair;
grant select on dba_2pc_pending to ezair;
grant select on dba_pending_transactions to ezair;
grant execute on dbms_xa to ezair;
DaveR
"Peace" - is the message really so hard to understand?
From: Risley, David (HAL)
Sent: Tuesday, February 14, 2012 7:58 AM
To: Ruckman, Maurice (HAL); HAL Service Request Center (HAL)
Cc: HAL DistList: IS DBA; Augustine, Anila (HAL); Harrington, Scott (HAL Contractor); Fernan, Diana (HAL Contractor); Tonks, Kristen (HAL); Konar, Tara (PCL)
Subject: RE: Please Open ticket for EZAIR Database on WebTst with DBA's
Maurice,
We'll still need a security request that defines which database name and which user name to run the privileges for.
DaveR
"Peace" - is the message really so hard to understand?
From: Ruckman, Maurice (HAL)
Sent: Tuesday, February 14, 2012 7:53 AM
To: HAL Service Request Center (HAL)
Cc: HAL DistList: IS DBA; Augustine, Anila (HAL); Harrington, Scott (HAL Contractor); Fernan, Diana (HAL Contractor); Tonks, Kristen (HAL); Konar, Tara (PCL)
Subject: Please Open ticket for EZAIR Database on WebTst with DBA's
Importance: High
This is considered a work stoppage and should be resolved today.
The WebSphere application is throwing an error, that hopefully updates to database permissions will correct. The user for the database defined in the application, is ezair.
Here’s are original article:
http://www-01.ibm.com/support/docview.wss?uid=swg21196663
Excerpt steps from article, it would probably be best to use the original article though.
The solution is to give the Oracle user permission to perform the recovery, specifically to access the internal Oracle tables used to manage recovery.
This problem can occur with all versions of Oracle: 8i, 9i, 10g, and 11g.
Run the following commands as user SYS:
Thanks,
Maurice Ruckman
Voice: (206) 626-7497 x67497
Cellular: (206) 650-7576
Using PERL PPM through firewall proxy
Use the following in DOS prior to running PPM
REM If the proxy server requires a user name and password
REM include them in the following form:
REM http_proxy=http://username:password@proxy.example.org
set http_proxy=http://mlr:password@10.194.90.18:80
Getting Eclipse 3.5 Working Behind Firewall
Update eclipse.ini file by adding the following line to the end of the file:
-Dorg.eclipse.ecf.provider.filetransfer.excludeContributors=org.eclipse.ecf.provider.filetransfer.httpclient
Windows, Preferences, Network Connections
Active Provider: Manual
Complete HTTP and HTTPS with credentials and make sure SOCKS setting is cleared
Use Ubuntu with VirtualBox Behind Proxy
There seems to be problems with Ubuntu 9.04. It is possible to install from CD-ROM instead by using:
- Press System → Administration → Software Sources.
- Go to the Third Party Software tab and click on the Add CD-ROM button.
- Insert the CD.
Do the following in your terminal prior to using apt-get:
export http_proxy=http://username:pword@HALPROXY1.flagship.hal.com:80
