Horst Herb wrote:
> If you want to consolidate, I still have one spare monster UPS - 2kW for 
> several *hours*. Weighs 380 kg, but needs batteries replaced, they don't hold 
> charge well any more. You would also have to come to pick it up yourself I 
> suppose. 

If David can pick that up by himself he ought to be heading for Beijing
in the weightlifting team...

>> On another issue I am trying to forward a browser URL request to an
>> internal server on a debian box. I think I can do this with mod_proxy
>> but I also note mod_rewrite. Is the latter the more modern approach?
> 
> mod_proxy is easy and does what you want.

Be careful, though. You'll need to poke a hole in your inner firewall to
allow your DMZ Web server to pass HTTP requests courtesy of mod_proxy on
to your internal Web server - thus you necessarily will have opened a
direct HTTP channel to one of your internal machines, and thus you need
to be sure that everything that can be accessed via HTTP on that machine
is very secure - easier said that done: witness hackers owning Horst's
servers in Germany not once, but twice, via HTTP as I recall, due to
insecure wiki CGI scripts written by third parties (is that correct,
Horst? BTW, no hint of criticism there, but a salutary tale when someone
as cluey as Horst can be stung repeatedly by hackers exploiting
published weaknesses in third party applications). Once hackers "own" a
box on your internal network, they can do quite a lot of poking around
on your network - many protocols can be tunnelled over HTTP.

Tim C

_______________________________________________
Gpcg_talk mailing list
[email protected]
http://ozdocit.org/cgi-bin/mailman/listinfo/gpcg_talk

Reply via email to