On Tue, 15 Apr 1997, Chuck Murcko wrote:

> Apache isn't useful as the sort of proxy you need. You want something like
> http-gw or plug-gw from the Firewall Tool Kit (fwtk). You need to set your
> browser to point at the Apache server to use it as a proxy, since its
> intent is to be used as an outbound and relay proxy.

  I've used httpd-gw from FWTK 1.3 and 2.0beta and they're too slow. I am
currently using Apache as the outbound (corporation->internet) proxy and
it works like a champ, inbound (internet->corporate web server) is the
problem.

> I assume you have considered the dangers in relaying RAW HTTP requests
> inbound through your firewall.
  
  As much as possible. Using something as big and complex as CERN as a
proxy is less than optimal, but I'm willing to trade the potential holes
for the speed increase.

  Design and security implications aside, is this a bug?  In the inbound
role, Apache would only be acting as a relay, so why is it returning a
directory listing?

stuart
--
Stuart Stock                                   [EMAIL PROTECTED]
Systems/Security Administrator                 http://www.gundaker.com
Gundaker Realtors                              "Blowing a buffer as we speak"

Reply via email to