reverse proxy server error

We try to test our proxy server through IBM_HTTP_Server/2.0.47.1 - PK07831 Apache/2.047, but not success.  Here is the error msg:
[debug] proxy_util.c(11181): proxy HTTP: fam 2 socket created to connect to xx.xx.xx.com
[error] (78)Connection timed out: proxy: HTTP: attempt to connect to 172.xx.xx.xxx.xx (xx.xx.xx.com) failed

Can anyone tell us what is wrong and what should we do?  Thank you for your help
lynnlyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

0xSaPx0Commented:
yes, the proxy server is unable to establish an HTTP session to 172.xx.xx.xxx.xx, the 172.16 range is reserved for internal use, is this proxy server proxying only for internal addresses?. Also can you give me more information about your topology, it sounds like your proxy is misplaced or misconfigured.

- SaP -
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lynnlyAuthor Commented:
Thank you for your response.

Here is what we try to do: we have two web application servers:  Websphere, application languge is java, running on UNIX,  other web application server is IIS, application is coding by asp, running on NT.  When user request NT application from UNIX(home site), we need to redirect response to the user and connect user to NT via an IHS apache (outside of DMZ) proxying for NT address, we don't want NT address expose to the internet.  User are internet user outside of internet fire wall, UNIX and NT are inside DMZ.  

You said internal addresses, does that mean not registered address? and "proxy is misplaced", where should we place it based on what I described above?

I understand what you said that proxy may misconfigured, but where and how to correct it, can you give me clue?  

Thanks
0
lynnlyAuthor Commented:
Hi, SaP
Need your help.  Do you need more info?  Thanks
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

nepostojeci_emailCommented:
internal addresses are used for local network, not internet.
so, if you are developing an internet oriented proxy, it obviously wont
work.
0
lynnlyAuthor Commented:
I am new to the network, can you please give me more detail? What you said is we need translate internal address to internet address? If this is correct, how?  Should we use Network Address Translation(NAT) or proxy server can handle the translation?  thanks for your help
0
nepostojeci_emailCommented:
well, first of all try pinging the ip 172.x.x.x from the machine where the proxy
is installed and running, to see if that machine can reach the 172.x.x.x

if it can, then check is there any firewall installed, that may prevent the access
to the 172.x.x.x

anyway, from the machine where the proxy has been installed, at the DOS
prompt, type

  tracert 172.x.x.x

and you'll see the replies from every machine that's in between the 172.x.x.x
and the machine you're tracerouting from.
0
lynnlyAuthor Commented:
I know what you said are right direction where we should go, but I have been assigned to other things by management.  I will get back with you in about one week.  thanks
0
lynnlyAuthor Commented:
Please don't close this,  I will continue to work on this issue soon.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.