[SOLVED] Proxy for Server

[odeleon]

IHAC who uses a proxy server to connect from their datacenter to the internet.

I've just finished setting up the ZCS servers for them and we're having problems with zimlets that need to connect to outside servers (such as the Dictionary zimlet and *.dict.org).

We only have the default COS so far and it is set to allow access to the required domains. I even added * to see if that was the problem. It isn't

[zimbra@server ~]$ zmprov gc default |grep zimbraProxyAllowedDomains 
zimbraProxyAllowedDomains: *.dict.org
zimbraProxyAllowedDomains:  *.worldlingo.com
zimbraProxyAllowedDomains: *.yahoo.com
zimbraProxyAllowedDomains: *.yimg.com
zimbraProxyAllowedDomains: *.maxmind.com
zimbraProxyAllowedDomains: *.yahooapis.com
zimbraProxyAllowedDomains: *.csgnetwork.com
zimbraProxyAllowedDomains: *.google.com
zimbraProxyAllowedDomains:  *.altavista.com
zimbraProxyAllowedDomains: *

I see this timout error in mailboxd.log:

2010-05-05 12:22:57,958 WARN  [btpool0-31://server.example.com:8080/service/proxy?target=http%3A%2F%2Fwww.dict.org%2Fbin%2FDict%3FDatabase%3Deng-spa%26Form%3DDict1%26Strategy%3D*%26submit%3DSubmit%2Bquery%26Query%3Dexit] [] log - /service/proxy: org.apache.commons.httpclient.ConnectTimeoutException: The host did not accept the connection within timeout of 25000 ms

Is there a way to set a proxy server for the proxy servlet? ... or some way to get around this?

thanks

[Klug]

There is something.

zmprov mcf zimbraHttpProxyURL http://[user]:[pwd]@[proxy ip]:[proxy port]

[Dirk]

This has been one of those things that I've been aware of for a while, and been meaning to fix.

Generally I keep forgetting to address it but it looks like such a simple fix that I just had a go. It didnt seem to work though. I even restarted the services but the same messages are seen in the log.

How about you odeleon? Any success?

[odeleon]

Thanks, but I made that change and now the message went from WARN to ERROR:

2010-05-06 17:28:36,711 ERROR [btpool0-32://zcsproxy.example.com/service/proxy?target=http%3A%2F%2Fwww.dict.org%2Fbin%2FDict%3FDatabase%3D*%26Form%3DDict1%26Strategy%3D*%26submit%3DSubmit%2Bquery%26Query%3Dtext] [] log - /service/proxy

and just to check, the proxy is set correctly:

[zimbra@server ~]$ zmprov gacf |grep -i proxyurl
zimbraHttpProxyURL: http://proxy.example.com:8081

And the outgoing proxy doesn't need any user/password information

Again, this is not my server, but a customer's

[zimbra@server ~]$ zmcontrol -v
Release 6.0.5_GA_2213.RHEL5_64_20100202214931 RHEL5_64 NETWORK edition.

[odeleon]

Well, it turns out you can't have underscore characters in the proxy server's name. I had replaced that in the previous posts to protect customer's privacy so there was an innacuracy in my previous reports.

I caught the mistake doing a tail -f on mailbox.log and saw this

2010-05-10 14:00:47,833 WARN  [btpool0-5://server.example.com:8080/service/proxy?target=http://translate.google.com/translate_t] [] misc - Unable to configureProxy: Illegal character in scheme name at index 4: conf_www.example.com:8081

I changed the proxy server's name in /etc/host and it's working ok now.

Thanks.

[Klug]

Well, it turns out you can't have underscore characters in the proxy server's name.

AFAIK, this is not a ZCS limitation (just that ZCS likes to follow the RFCs).

You should not be using underscore in host name nor domain name.

[odeleon]

I realize that. Never said it was a ZCS limitation...it's more a condition of the customer's network and one I have to live with.

Thanks!