Re: Ezproxy and Firewalls

> We have been using Ezproxy off of our webserver for some time now.
> Recently, we had a Cisco Pix firewall installed on our network, and can no
> longer get to Ezproxy.
> 
> I have a feeling that we've got to open access to Ezproxy through the
> firewall, but don't know how.

Yes, that is what you need to do.

> Can someone give me the basic logic?  By this I mean something like,
> ".you'll have to open firewall access to ports 2048 through 2068 on your
> webserver."

You need to allow incoming access to port 2048 through the highest port 
EZproxy is using.  By default, it won't go higher than 2248.  The 
information at:

	http://www.usefulutilities.com/support/howmanyports.html

describes how many ports EZproxy uses, and how to determine how many ports 
need to be opened for your firewall.

You might also evaluate moving to proxy by hostname, which eliminates the 
need to open more than 1-3 ports.

Chris

--------------------------------------------------------------------------
Chris Zagar                                               Useful Utilities
zagar <at> UsefulUtilities.com                 20783 N 83rd Ave Ste 103 PMB 192

RE: Ezproxy and Firewalls

If you are using option proxybyhostname, then you will need port 80 and maybe 2048 if you still have some
links using that port.
If you are not using the proxybyhostname, then you will need to open all the ports in your ezproxy.hst file
(the second number- they will all increase by one in order down the list).  And you will have to add new ports
as you add new vendors or old vendors change websites.

-----Original Message-----
From: Tony Booth [mailto:tonybooth <at> optonline.net]
Sent: Wednesday, October 15, 2003 3:57 PM
To: EZProxy discussion list
Subject: [ezproxy] Ezproxy and Firewalls

Hi,

We have been using Ezproxy off of our webserver for some time now.
Recently, we had a Cisco Pix firewall installed on our network, and can no
longer get to Ezproxy.

I have a feeling that we've got to open access to Ezproxy through the
firewall, but don't know how.

Can someone give me the basic logic?  By this I mean something like,
".you'll have to open firewall access to ports 2048 through 2068 on your
webserver."

Thanks,
Tony Booth

"It is a worthy thing to fight for one's freedom;
 it is another sight finer to fight for another man's."

Authenticate but don't proxy

It would be handy if we could use EZProxy to force users to authenticate on
their way to a particular non-proxied resource (our chat reference server),
without requiring them to authenticate for other non-proxied resources. (I
realize this doesn't give real security but it would meet our needs.) I have
a feeling that a clever arrangement of "Option RedirectUnknown" and other
configuration directives in ezproxy.cfg might achieve this, but I haven't
been able to come up with anything. Any ideas?

Peter

Peter Binkley
Digital Initiatives Technology Librarian
Information Technology Services
4-30 Cameron Library
University of Alberta Libraries
Edmonton, Alberta
Canada T6G 2J8
Phone: (780) 492-3743
Fax: (780) 492-9243
e-mail: peter.binkley <at> ualberta.ca

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

Re: Authenticate but don't proxy

> It would be handy if we could use EZProxy to force users to authenticate on
> their way to a particular non-proxied resource (our chat reference server),
> without requiring them to authenticate for other non-proxied resources. (I
> realize this doesn't give real security but it would meet our needs.) I have
> a feeling that a clever arrangement of "Option RedirectUnknown" and other
> configuration directives in ezproxy.cfg might achieve this, but I haven't
> been able to come up with anything. Any ideas?

I would suggest this type of configuration for EZproxy 2.2:

	Title Chat Reference
	URL -redirect chatref http://chat.yourlib.org/

For the starting point URL, you would use:

	http://ezproxy.yourlib.org/login/chatref

Prior to EZproxy 2.2, it would look like:

	Title Chat Reference
	URLRedirect chatref http://chat.yourlib.org/

(that still works in 2.2 as well, but the syntax is getting cleaned up a 
bit for the new documentation.)

This format is mainly good for hiding real URLs from people, often due to 
them containing passwords that you don't want to post on a public page.

Chris

Configuration entry for Nature Publishing journals

I wonder if anyone else is experiencing problems with proxy access to Nature
journals?
When connecting via EZproxy a password and login prompt appears at the
point of accessing a full-text article. I haven't had a chance yet to
track
the sequence of urls to see if something has changed.
If someone could send a currently working configuration to me directly -or
to the list- that would be greatly appreciated.
We recently moved EZproxy to a Linux server but that has had no negative
impact so far.

Thank you.

--

-- 
Alfred Kraemer
Head, Tech. Services
Medical College of Wisconsin Libraries
8701 Watertown Plank Road
Milwaukee, WI 53226

E-mail: akraemer <at> mcw.edu
Phone: 456-4273

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

RE: Configuration entry for Nature Publishing journals

This is working for us tonight:

T Nature Journals
U http://www.nature.com/ng/
H www.nature.com

The pdfs do have ActiveX controls in them that may require
setting security level in Internet Explorer to Low, but 
no other problem here.

-----Original Message-----
From: Alfred Kraemer [mailto:akraemer <at> post.its.mcw.edu]
Sent: Thursday, October 16, 2003 9:47 PM
To: EZProxy discussion list
Subject: [ezproxy] Configuration entry for Nature Publishing journals

I wonder if anyone else is experiencing problems with proxy access to Nature
journals?
When connecting via EZproxy a password and login prompt appears at the
point of accessing a full-text article. I haven't had a chance yet to
track
the sequence of urls to see if something has changed.
If someone could send a currently working configuration to me directly -or
to the list- that would be greatly appreciated.
We recently moved EZproxy to a Linux server but that has had no negative
impact so far.

Thank you.

set-up and testing

MaxVirtualHosts

I am getting this error:

2003-10-17 11:11:50 ezproxy.cfg MaxVirtualHosts at limit;

How do I reset this so I can continue proxying?

Tim

--

-- 
Tim McGeary
Senior Library Systems Specialist
Lehigh University
610-758-4998
tim.mcgeary <at> lehigh.edu

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

RE: MaxVirtualHosts

Increase your max virtual hosts

Don

-----Original Message-----
From: Tim McGeary [mailto:tmm8 <at> Lehigh.EDU] 
Sent: Friday, October 17, 2003 10:26 AM
To: EZProxy discussion list
Subject: [ezproxy] MaxVirtualHosts

I am getting this error:

2003-10-17 11:11:50 ezproxy.cfg MaxVirtualHosts at limit;

How do I reset this so I can continue proxying?

Tim

--

-- 
Tim McGeary
Senior Library Systems Specialist
Lehigh University
610-758-4998
tim.mcgeary <at> lehigh.edu

---
You are currently subscribed to ezproxy as: dsewell <at> library.tmc.edu To
unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

Re: Authenticate but don't proxy

Chris,

Can you put this and all the other undocumented configuration options on the
EZProxy website, so we will be able find all the possibilities that EZProxy
can offer?

Thanks!

Bin Zhang
Digital Information Services Librarian
Library Information Systems
California State University, Sacramento
+1(916)278-5664 (voice)
+1(916)278-3891 (fax)
bzhang <at> csus.edu

> -----Original Message-----
> From: Chris Zagar [mailto:zagar <at> usefulutilities.com] 
> Sent: Thursday, October 16, 2003 7:19 PM
> To: EZProxy discussion list
> Subject: [ezproxy] Re: Authenticate but don't proxy
> 
> 
> > It would be handy if we could use EZProxy to force users to 
> > authenticate on their way to a particular non-proxied resource (our 
> > chat reference server), without requiring them to authenticate for 
> > other non-proxied resources. (I realize this doesn't give real 
> > security but it would meet our needs.) I have a feeling 
> that a clever 
> > arrangement of "Option RedirectUnknown" and other configuration 
> > directives in ezproxy.cfg might achieve this, but I haven't 
> been able 
> > to come up with anything. Any ideas?
> 
> I would suggest this type of configuration for EZproxy 2.2:
> 
> 	Title Chat Reference
> 	URL -redirect chatref http://chat.yourlib.org/
> 
> For the starting point URL, you would use:
> 
	http://ezproxy.yourlib.org/login/chatref

Prior to EZproxy 2.2, it would look like:

	Title Chat Reference
	URLRedirect chatref http://chat.yourlib.org/

(that still works in 2.2 as well, but the syntax is getting cleaned up a 
bit for the new documentation.)

This format is mainly good for hiding real URLs from people, often due to 
them containing passwords that you don't want to post on a public page.

Chris

--------------------------------------------------------------------------
Chris Zagar                                               Useful Utilities
zagar <at> UsefulUtilities.com                 20783 N 83rd Ave Ste 103 PMB 192
http://www.UsefulUtilities.com                      Peoria, AZ  85382-7430

---
You are currently subscribed to ezproxy as: bzhang <at> csus.edu
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu