Bill,

We use an ANS InterLock firewall and back up a couple Windows/NT hosts
that are on the Internet. We do this automatically with the scheculer.
To do this:

1.) Set up a TCP forwarder to forward packets on port 1500 to your ADSM
server which is presumably on the private side.
2.) When you configure you ADSM client on the machine to be backed up
(DSM.OPT file) point it at the public side IP address of your firewall
instead of
the ADSM server.
3.) Add rules to firewall to permit port 1500 to go only for the
selected
machines on the public side.

Hope this works for you.

John A. Jorgensen
Caliber Technology, Inc.           (330) 384-9000 Ext 3848
557 E Tallmadge Ave.              FAX (330) 258-6066
Akron, Ohio 44310

>----------
>From:  Bill Anderson[SMTP:banderson AT ALLINA DOT COM]
>Sent:  Wednesday, October 08, 1997 1:45 PM
>To:    ADSM-L AT VM.MARIST DOT EDU
>Subject:       ADSM through a firewall
>
>I apologize if this question has been asked before but I am new to the
>list.
>
>We use Raptor's Eagle firewall.  We have RS/6000s on our "DMZ" and we
>have a need to back them up via ADSM.  Our ADSM servers reside on our
>corporate network which connects to the firewall for Internet and
>business partner access.  The diagram below describes our situation:
>
>                                       Internet
>                                            |
>                        DMZ - -  Firewall
>                                            |
>                              Corporate Network
>
>When we initiate a backup of an RS/6000 on the DMZ from the ADSM server
>on our corporate network, a Sniffer trace shows that ADSM is attempting
>to talk directly to our firewall and not to the RS/6000 we are trying to
>back up.  When I use a VPN type (packet filtering) connection through
>our firewall to the DMZ, backups work fine.  However, when I try to use
>a generic service passer on the firewall (application proxies at ports
>1500 and 1501), I get the error mentioned above (attempting to talk
>directly to the firewall).
>
>Has anyone else had this problem? If so, is there a solution that allows
>ADSM to work via an application proxy on a firewall?
>
>Thanks.
>
>Bill Anderson
>Allina Health System
>banderson AT allina DOT com
>