Andreas Herrmann wrote: > mRyOuNg schrieb: >> Microsoft ISA Server is a Firewall/Proxy/Reverse-Proxy ... >> >> So in your case, I suppose it does a reverse proxy job (not a tunneling, >> just working as a web client for internal network). >> >> I already replaced several ISA server with GNU/Linux solutions, with the >> help of Apache and his mod_proxy ... that's imho your solution. > > Can this also be done for SSH und IMAP stuff? > IMAP proxying is also possible (for example, uw-imapproxy does the job)... Don't know for the SSH part (never find it useful as i don't publish ssh to external network)...
The fact is that http reverse proxy is hostname based (virtual hosts) which means that even with only 1 IP, you can host several websites ... That's not the same for IMAP or SSH ... because thoses services are not hostname based... If you want to publish only 1 IMAP server to external network (for example, imap.domain.tld), there's no problem then ... proxying or nating is the way it's usually done (via DMZ for the NAT part). Else, if you want, with only 1 IP, to publish several IMAP servers to external networks without using "exotic" tcp/udp ports, then, that's a bit trickier, and needs some studies... Ofcourse, SRV feature exists in DNS system, but there are not that useful except for kerberos service and such ... not for imap or ssh... . /mRyOuNg/ . [ SoundBomb . Syn[Rj] ] . mail: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> web : mryoung.soundbomb.net <http://mryoung.soundbomb.net/> -- [email protected] mailing list
