Hi Taka,
I maybe able to help you as I have done a lot of this stuff. Although
I would need to understand your setup better. Anyway while I still do
not have the details here are the possible setups.
Setup A
- ACS site is on the local subnet (192.168.x.x). Local users can
connect but outside users cannot connect.
Working setup is. Have the internet DNS point to your firewall
(acs.site.com -> firewall IP addr). On the firewall forward port 80
to the ACS site. On the ACS server override the DNS name using
/etc/hosts. (acs.site.com -> 192.168.x.x). Also local users must use
the local naming (acs.site.com -> 192.168.x.x).
This is setup is pretty weird but let me explain. ACS request
processor for some reason will always make the IP address into DNS
name on each connection. If you do not override the DNS name via
/etc/hosts on the ACS server it will always resolve acs.site.com to
the firewall IP addr.
I am sorry if the explanation is confusing, I haven't got much time to
write and read you IPchains config. Anyway if you are confused just
email me I maybe able to help you.
Jun
