release notes query

[russh]

Hi,

the release notes say;

Installation issues
Following procedure/adjustment is mandatory if You install at CentOS6 (64bit) or ORACLE Linux 6 (x86)
If port 80 is not set in ip tables. Tomcat will not work at all - scaly-tomcat service will run, but in tomcat log there will be a big backtrace msg.
 Add port 80 iptables afterward
 restart iptables service
 restart scaly-tomcat service
 restart httpd serviced
and after all this, it finally works(even Oracle Linux 6 x86)

By this do you mean you require port 80 to be permitted (inbound/outbound?) in iptables?

[ls-al]

The explanation in the Relnotes is at least incomplete.
Port 80 is used by Apache which will redirect requests to the Webapps as usual through mod_proxy_ajp.
It was never a good idea to block port 80 completely with the default configuration. Essential components like SAC/UM/RES and SIS will communicate locally against the public IP of the system through http. This hasnt changed in Scalix 12.
It might be possible to change this behaviour but still require heavy changes in the .properties of all components involved.

Although this is not a perfect solution, theres not much security risk once you make sure that the clients are using https for example by configuring a rewrite for SWA, EAS and SAC access as described somewhere in the Wiki.

[russh]

thanks for that - I'll run this upgrade on a test box first to check.... and to think I was all ready staged with a competing product, too! I'd much rather stick with Scalix though given a choice.