• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 211
  • Last Modified:

publishing pdf documents from a lan to the web via a dmz server

We have an application that has a couple of web pages. The first web page enables a user to select a key field of metadata from a MySQL datatbase located on the Lan which then, on the second page generates an active server page with additional metedata from the selecetd MySQL record, with a hyperlink to a pdf document which is obtained from a URL entry in the MySQL database. This is in the form of //machinename/docpath. When this is selected it is meant to open the pdf document in a seperate web browser window. I have opened ports 3306 for the mysql server from the WAN to the DMZ and from the DMZ to the LAN. I have also opened the HTTP port 80 from the WAN to the DMZ and the DMZ to the LAN. I can view the documents on the DMZ server through the web pages OK- but from the WAN I can only get the 2 pages working (My SQL is also fine) but cannot view the document. This must be a common requirement. Could anybody please tell me or give me pointers as to how this is done? It seems that on the WAN side the document cannot be found. The subnet of the Lan is 192.168.1.x, the subnet of the DMZ is 192.168.2.x

Regards

Simon Head
0
SNHead
Asked:
SNHead
  • 2
1 Solution
 
prashsaxCommented:
Yes, you won't be able to see documents from WAN.

It is because, their is no access from WAN to LAN. The connectivity is from DMZ to LAN only.

When you link a document say kept at location \\X.X.X.X\SharePath, then a user on internet will be directed to the IP address X.X.X.X, which will not be accessible as it is a private IP address.

What you need to do is to put your documents on a server which can be accessed from WAN.
It could be your web server. Then link you page to the PDF location on the web server using either domainname or IP address. Also make sure, that the folder where these documents are located is accessible using web server. I.E the folder must be added as either virtual directory or could be located inside the directory where webpages are kept on the web server.
0
 
Steve KnightIT ConsultancyCommented:
Actually, thinking about this.   Have you tried creating a virtual directory within your website which points to the server on the main LAN using a UNC (Ip address if needed).  You can set the user/password it uses for the connection in the virtual directory path
0
 
prashsaxCommented:
Yes.

That the better option as sugessted by dragon-it.

Just create a Virtual Directory pointing to actual shared folder. Then change your ASP code to load PDF from virtual directory instead of Shared Folder.

0
 
SNHeadAuthor Commented:
This problem was resolved through code on the web server. We could not risk creating a unc link or any other link which exposed the documents to the dmz, just in case the dmz was compromised exposing the share- as there were sensitive documents within the share. The app only uses 2 ports, one for the documents, the other for the MySQL database. It all works a treat!

Regards

Simon Head
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now