How to bind specific interface of the machine to Firewall Analyzer application?

    For customers of version 7.5 or higher

    Note:
    • In Windows, to comment a line in the batch (.bat) file prefix 'rem' to the line and to uncomment remove the 'rem' in the beginning of the line.
    • In Linux, to comment a line in the script (.sh) file prefix '#' to the line and to uncomment remove the '#' in the beginning of the line.

    For Windows Machine: (running as application and not as service)

    • Shutdown Firewall Analyzer.
    • Open the run.bat file which is under <Firewall Analyzer Home>bin directory and go to "RESTART Command block", uncomment the below RESTART command line and replace <ip-address> with the IP address to which you want to bind the application, comment the existing RESTART command line and save the file.
       
      rem %JAVA% %JAVA_OPTS% -cp "%CLASS_PATH%" com.adventnet.mfw.Starter %SAFE_START% -c default -b <ip-address>
      to
      %JAVA% %JAVA_OPTS% -cp "%CLASS_PATH%" com.adventnet.mfw.Starter %SAFE_START% -c default -b <ip-address>
       
      %JAVA% %JAVA_OPTS% -cp "%CLASS_PATH%" com.adventnet.mfw.Starter %SAFE_START%
      to
      rem %JAVA% %JAVA_OPTS% -cp "%CLASS_PATH%" com.adventnet.mfw.Starter %SAFE_START%
    • Open setcommonenv.bat file which is under <Firewall Analyzer Home>bin directory and go to "JAVA_OPTS Setting command Block", uncomment the below JAVA_OPTS setting command line and replace <ip-address> with the IP address to which you want to bind the application and comment the existing JAVA_OPTS setting command.
       
      rem set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms128m -Xmx512m -Dspecific.bind.address=<ip-address>
      to
      set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms128m -Xmx512m -Dspecific.bind.address=<ip-address>
       
      set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms256m -Xmx1024m
      to
      rem set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms256m -Xmx1024m
    • Save the file
    • Open the database_param.conf file which is under <Firewall Analyzer Home>conf directory and replace localhost in url tag with the <binding IP address> to which you want to bind the application and save the file.
       
      url=jdbc:postgresql://localhost:33336/firewall?stringtype=unspecified
      to
      url=jdbc:postgresql://<binding IP address>:33336/firewall?stringtype=unspecified 
    • Open the postgresql.conf file which is under <Firewall Analyzer Home>pgsqldata directory and uncomment the line '#listen_addresses = 'localhost'' in the CONNECTIONS AND AUTHENTICATION section and replace the 'localhost' with the '<binding IP address>' to which you want to bind the application and save the file.
       
      #------------------------------------------------------------------------------
      # CONNECTIONS AND AUTHENTICATION
      #------------------------------------------------------------------------------
      # - Connection Settings -
      #listen_addresses = 'localhost' # what IP address(es) to listen on;
      # comma-separated list of addresses;
      # defaults to 'localhost'; use '*' for all
      # (change requires restart)
       
      to
       
      #------------------------------------------------------------------------------
      # CONNECTIONS AND AUTHENTICATION
      #------------------------------------------------------------------------------
      # - Connection Settings -
      listen_addresses = <binding IP address> # what IP address(es) to listen on;
      # comma-separated list of addresses;
      # defaults to 'localhost'; use '*' for all
      # (change requires restart) 
    • Open the pg_hba.conf file which is under <Firewall Analyzer Home>pgsqldata directory and add the line
    host all all <binding IP address in IPv4 format>/32 trust
    after the line
    host all all 127.0.0.1/32 trust 

    and save the file.

    # TYPE DATABASE USER ADDRESS METHOD
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
     
    to
     
    # TYPE DATABASE USER ADDRESS METHOD
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    host all all <binding IP address in IPv4 format>/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
    • Restart Firewall Analyzer.

     

    For Windows machine (running as service)

    • Stop the Firewall Analyzer service.
    • Open setcommonenv.bat file which is under <Firewall Analyzer Home>bin directory and go to "JAVA_OPTS Setting command Block", uncomment the below JAVA_OPTS setting command line and replace <ip-address> with the IP address to which you want to bind the application and comment the existing JAVA_OPTS setting command.
       
      rem set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms128m -Xmx512m -Dspecific.bind.address=<ip-address>
      to
      set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms128m -Xmx512m -Dspecific.bind.address=<ip-address>
       
      set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms256m -Xmx1024m
      to
      rem set JAVA_OPTS=-Djava.library.path=..lib;..libnative -DpdfReport=false -Duser.country=US -Duser.language=en -DminDiskSpace=5 -Xms256m -Xmx1024m
    • Save the file
    • Open the wrapper.conf file which is under <Firewall Analyzer Home>serverconf and go to "Adding Application Parameters Block", uncomment the below Application Parameters from 2 to 5 and replace <ip-address> in 4th and 5th Application Parameter with the IP address to which you want to bind the application and save the file.
    wrapper.app.parameter.1=com.adventnet.mfw.Starter
    #wrapper.app.parameter.2=-L../lib/AdventNetDeploymentSystem.jar
    #wrapper.app.parameter.3=-c default
    #wrapper.app.parameter.4=-b <ip-address>
    #wrapper.app.parameter.5=-Dspecific.bind.address=<ip-address>
    • Open the database_param.conf file which is under <Firewall Analyzer Home>conf directory and replace localhost in url tag with the <binding IP address> to which you want to bind the application and save the file.
       
      url=jdbc:postgresql://localhost:33336/firewall?stringtype=unspecified
      to
      url=jdbc:postgresql://<binding IP address>:33336/firewall?stringtype=unspecified
    • Open the postgresql.conf file which is under <Firewall Analyzer Home>pgsqldata directory and uncomment the line '#listen_addresses = 'localhost'' in the CONNECTIONS AND AUTHENTICATION section and replace the 'localhost' with the '<binding IP address>' to which you want to bind the application and save the file.
       
      #------------------------------------------------------------------------------
      # CONNECTIONS AND AUTHENTICATION
      #------------------------------------------------------------------------------
      # - Connection Settings -
      #listen_addresses = 'localhost' # what IP address(es) to listen on;
      # comma-separated list of addresses;
      # defaults to 'localhost'; use '*' for all
      # (change requires restart)
       
      to
       
      #------------------------------------------------------------------------------
      # CONNECTIONS AND AUTHENTICATION
      #------------------------------------------------------------------------------
      # - Connection Settings -
      listen_addresses = <binding IP address> # what IP address(es) to listen on;
      # comma-separated list of addresses;
      # defaults to 'localhost'; use '*' for all
      # (change requires restart)
    • Open the pg_hba.conf file which is under <Firewall Analyzer Home>pgsqldata directory and add the line
    host all all <binding IP address in IPv4 format>/32 trust
    after the line
    host all all 127.0.0.1/32 trust

    and save the file.

    # TYPE DATABASE USER ADDRESS METHOD
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
     
    to
     
    # TYPE DATABASE USER ADDRESS METHOd
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    host all all <binding IP address in IPv4 format>/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
    • Restart Firewall Analyzer

    For Linux Machine: (running as application and not as service)

    • Shutdown Firewall Analyzer.
    • Open the run.sh file which is under <Firewall Analyzer Home>/bin directory and replace the existing jboss main arguments "-LAdventNetDeploymentSystem.jar" with these arguments "-LAdventNetDeploymentSystem.jar" "-c default" "-b <ip-address>" and replace <ip-address> with the ip-address to which you want to bind your application and save the file.

      Before changing, the jboss main arguments will be

      org.jboss.Main "-LAdventNetDeploymentSystem.jar"

      After changing the arguments, it will be

      org.jboss.Main "-LAdventNetDeploymentSystem.jar" "-c default" "-b <ip-address>"
    • Open setcommonenv.sh file which is under <Firewall Analyzer Home>/bin directory and go to "JAVA_OPTS Setting command Block", uncomment the below JAVA_OPTS setting command and replace <ip-address> with the IP address to which you want to bind the application and comment the existing JAVA_OPTS setting command and save the file.
       
      #JAVA_OPTS="-Djava.awt.headless=true -DpdfReport=false -Duser.language=en -Duser.country=US -DminDiskSpace=5 -Djava.library.path=../lib:../lib/native -Xms128m -Xmx512m -Dspecific.bind.address=<ip-address>"
      to
      JAVA_OPTS="-Djava.awt.headless=true -DpdfReport=false -Duser.language=en -Duser.country=US -DminDiskSpace=5 -Djava.library.path=../lib:../lib/native -Xms128m -Xmx512m -Dspecific.bind.address=<ip-address>"

      JAVA_OPTS="-Djava.awt.headless=true -DpdfReport=false -Duser.language=en -Duser.country=US -DminDiskSpace=5 -Djava.library.path=../lib:../lib/native -Xms256m -Xmx1024m"
      to
      #JAVA_OPTS="-Djava.awt.headless=true -DpdfReport=false -Duser.language=en -Duser.country=US -DminDiskSpace=5 -Djava.library.path=../lib:../lib/native -Xms256m -Xmx1024m"
    • Open the database_param.conf file which is under <Firewall Analyzer Home>conf directory and replace localhost in url tag with the <binding IP address> to which you want to bind the application and save the file.
       
      url=jdbc:postgresql://localhost:33336/firewall?stringtype=unspecified
      to
      url=jdbc:postgresql://<binding IP address>:33336/firewall?stringtype=unspecified
    • Open the postgresql.conf file which is under <Firewall Analyzer Home>pgsqldata directory and uncomment the line '#listen_addresses = 'localhost'' in the CONNECTIONS AND AUTHENTICATION section and replace the 'localhost' with the '<binding IP address>' to which you want to bind the application and save the file.
    #------------------------------------------------------------------------------
    # CONNECTIONS AND AUTHENTICATION
    #------------------------------------------------------------------------------
    # - Connection Settings -
    #listen_addresses = 'localhost' # what IP address(es) to listen on;
    # comma-separated list of addresses;
    # defaults to 'localhost'; use '*' for all
    # (change requires restart)
     
    to
     
    #------------------------------------------------------------------------------
    # CONNECTIONS AND AUTHENTICATION
    #------------------------------------------------------------------------------
    # - Connection Settings -
    listen_addresses = <binding IP address> # what IP address(es) to listen on;
    # comma-separated list of addresses;
    # defaults to 'localhost'; use '*' for all
    # (change requires restart)
    • Open the pg_hba.conf file which is under <Firewall Analyzer Home>pgsqldata directory and add the line 
    host all all <binding IP address in IPv4 format>/32 trust
    after the line
    host all all 127.0.0.1/32 trust

    and save the file.

    # TYPE DATABASE USER ADDRESS METHOD
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
     
    to
     
    # TYPE DATABASE USER ADDRESS METHOD
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    host all all <binding IP address in IPv4 format>/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
    • Restart Firewall Analyzer
    Note:

    To shutdown Firewall Analyzer use the below command
        ./shutdown.sh -S -s <ip-address>:<jndi-port>

    where <jndi-port> in the above command is the one which you have set in sample-bindings.xml

    Ensure that the following two conditions are met:

    1. In .etc/nsswitch.conf file you need to ensure the below line:

    hosts:          files dns

    i.e. it should be in the order 'files' and 'dns' not the reverse as 'dns' and 'files'.
    i.e. it should not be     hosts:     dns files

    1. In .etc/hosts file add the below one as the first line

    <binded-ip-address>  localhost

    Replace <binded-ip-address> with the ip-address to which you want to bind your application.

    For Linux Machine: (running as service)

    • Open the postgresql.conf file which is under <Firewall Analyzer Home>pgsqldata directory and uncomment the line '#listen_addresses = 'localhost'' in the CONNECTIONS AND AUTHENTICATION section and replace the 'localhost' with the '<binding IP address>' to which you want to bind the application and save the file.
       
      #------------------------------------------------------------------------------
      # CONNECTIONS AND AUTHENTICATION
      #------------------------------------------------------------------------------
      # - Connection Settings -
      #listen_addresses = 'localhost' # what IP address(es) to listen on;
      # comma-separated list of addresses;
      # defaults to 'localhost'; use '*' for all
      # (change requires restart)
       
      to
       
      #------------------------------------------------------------------------------
      # CONNECTIONS AND AUTHENTICATION
      #------------------------------------------------------------------------------
      # - Connection Settings -
      listen_addresses = <binding IP address> # what IP address(es) to listen on;
      # comma-separated list of addresses;
      # defaults to 'localhost'; use '*' for all
      # (change requires restart)
    • Open the pg_hba.conf file which is under <Firewall Analyzer Home>pgsqldata directory and add the line 
    host all all <binding IP address in IPv4 format>/32 trust
    after the line
    host all all 127.0.0.1/32 trust 

    and save the file. 

    # TYPE DATABASE USER ADDRESS METHOD
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
     
    to
     
    # TYPE DATABASE USER ADDRESS METHOD
    # IPv4 local connections:
    host all all 127.0.0.1/32 trust
    host all all <binding IP address in IPv4 format>/32 trust
    # IPv6 local connections:
    host all all ::1/128 trust
    • Restart Firewall Analyzer

     

    Thank you for your feedback!

    Was this content helpful?

    We are sorry. Help us improve this page.

    How can we improve this page?
    Do you need assistance with this topic?
    By clicking "Submit", you agree to processing of personal data according to the Privacy Policy.