Hostname entry against public IP

[rajthampi]

Hi guys

We have one business application, accessed across GCC region by having a single entry with individual computer hosts file, ie

123.123.155.116 myappl.mycompany.com and other than Bahrain, all countries are able to successfully resolve the hostname (application only works against hostname (Oracle EBS)) against this entry with the hosts file. Now, prior contacting the ISP in Bahrain (where internet is regulated due to the current political situations) we need to know whether anything could be done from our end to resolve this issue.

Thanks and regards,

raj

 

[bill001g]

Not sure what you are asking.

You are saying that even when you put the ip in the host file on the actual pc the name does not resolve... or it resolves but just does not work.

The first I will have to defer to someone who knows more about how you can restrict internal PC configurations. It should always resolve.

In the second case we would have to assume that there is a firewall either blocking certain ports or even whole blocks of IP addresses. Blocking by DNS strings is highly unlikely. Then assuming it is a firewall you cannot just request the access you need your only solution is to build a tunnel. How exactly you do this will depend what is allowed though the firewall. The method that will almost always work is SSLVPN. You can either use one of the commercial services if they are not blocked or you can setup your own. You can buy a SSLVPN server or you can use a PC with something like OPENVPN. There are much simpler tunnels but they are easily blocked.

 

[rajthampi]

Not sure what you are asking.

You are saying that even when you put the ip in the host file on the actual pc the name does not resolve... or it resolves but just does not work.

The first I will have to defer to someone who knows more about how you can restrict internal PC configurations. It should always resolve.

In the second case we would have to assume that there is a firewall either blocking certain ports or even whole blocks of IP addresses. Blocking by DNS strings is highly unlikely. Then assuming it is a firewall you cannot just request the access you need your only solution is to build a tunnel. How exactly you do this will depend what is allowed though the firewall. The method that will almost always work is SSLVPN. You can either use one of the commercial services if they are not blocked or you can setup your own. You can buy a SSLVPN server or you can use a PC with something like OPENVPN. There are much simpler tunnels but they are easily blocked.

Actually you are correct, including Kuwait, many GCC countries allow HTTP against IP address. ie we can just create hostname entries with hosts file and do our deed. Unfortunately Bahrain started monitoring the internet due to the political conditions and SSLVPN is not an easily established solution at our end.
It looks like we have to publish the application over internet using a domain name.

Thanks for your reply

regards,

raj