F
Fred Flintstone
I have an odd problem. I'm beating myself bloody trying to get
debugging to work. I have VS.Net 2005 installed on a Windows XP SP2
workstation and on a W2003 Server. The asp.net application is
working. I need to debug. I get the error:
"Unable to start debugging on the web server. The debugger cannot
connect to the remote computer" ...and something about it not existing
or firewall problems. I'll note here that I can manually attach to
the web server process and that the debugger is loaded on the web
server. It shows "Administrator" as connected if I manually attach.
I do have a firewall. It's a Netscreen hardware firewall with Trust,
Unstrust and DMZ zones.
Trust: 10.0.1.x
DMZ: 10.0.0.x
Trust to DMZ is configured All/All.
Trust to Untrust is configured All/All
Untrust to DMZ is set to block TCP 135.
I opened TCP 135 and UDP 4500 and 500 from untrust to DMZ. It still
doesn't work. MS says one should not try to debug through a firewall
but the workstation and server are in 2 different zones for a very
good reason and opening TCP135 to the Untrusted zone is not wise. I
assume my data path from the workstation is from trust to untrust to
DMZ.
So what do I use? I can't debug to 10.0.0.9 because all of our
websites are DNS (host header) based. How do I debug
http://myweb.mydomain.com locally? It will always resolve to a public
address. I can't say myweb.mydomain.com is 10.0.0.9 in DNS, it's a
non-routeable address.
The server's actual name is www1. I'm thinking I could debug using
this name (resolves to 10.0.0.9) but if I go to http://www1 with a
browser I get nothing.
How do I resolve this or what's the best method of debugging when the
server uses host header names and is in a DMZ?
Thanks!
debugging to work. I have VS.Net 2005 installed on a Windows XP SP2
workstation and on a W2003 Server. The asp.net application is
working. I need to debug. I get the error:
"Unable to start debugging on the web server. The debugger cannot
connect to the remote computer" ...and something about it not existing
or firewall problems. I'll note here that I can manually attach to
the web server process and that the debugger is loaded on the web
server. It shows "Administrator" as connected if I manually attach.
I do have a firewall. It's a Netscreen hardware firewall with Trust,
Unstrust and DMZ zones.
Trust: 10.0.1.x
DMZ: 10.0.0.x
Trust to DMZ is configured All/All.
Trust to Untrust is configured All/All
Untrust to DMZ is set to block TCP 135.
I opened TCP 135 and UDP 4500 and 500 from untrust to DMZ. It still
doesn't work. MS says one should not try to debug through a firewall
but the workstation and server are in 2 different zones for a very
good reason and opening TCP135 to the Untrusted zone is not wise. I
assume my data path from the workstation is from trust to untrust to
DMZ.
So what do I use? I can't debug to 10.0.0.9 because all of our
websites are DNS (host header) based. How do I debug
http://myweb.mydomain.com locally? It will always resolve to a public
address. I can't say myweb.mydomain.com is 10.0.0.9 in DNS, it's a
non-routeable address.
The server's actual name is www1. I'm thinking I could debug using
this name (resolves to 10.0.0.9) but if I go to http://www1 with a
browser I get nothing.
How do I resolve this or what's the best method of debugging when the
server uses host header names and is in a DMZ?
Thanks!