Mircea Draghici wrote:
> Hi,
> 
>  
> 
> I am looking for a reverse proxing solution using EFW 2.0. I have
> several distinct webservers on my green network and I need to make them
> available on the internet. From the GUI  I can only  redirect  port 80
> to a certain IP. Of course I could use different ports  for each server
> but that is not the most convenient  solution since some applications
> cannot  run on other ports.
> 
>  
> 
> I searched on the web and found that both apache and squid can act as a
> reverse proxy. Has anyone tried anything like this on the endian box?
> Are there any plans for something like this because I think it would be
> very usefull. Before endian I was using ISA server and there was on
> option of redirecting based on host headers. I think this feature would
> nicely complement the  current endian feature set.
> 
This is a very bad idea: Don't let a firewall act as reverse proxy. You
will offer a proxy on the firewall to the public net, and then it is not
longer a firewall, it is a reverse proxy. If you have read the building
of an apache as secure reverse-proxy, you will have seen that you have
to make a lot of hardening and extra compiling.
Put an extra hardened Indian in the DMZ, this is the only secure way.

bye
Christoph
>  
> 
> Thanks in advance for the help and congratulations to the Endian team
> for a great product.
> 
>  
> 
> Best regards,
> 
>  
> 
> ~mircea



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to