Re: httpd proxy
On Fri, 27 Sep 2002 08:46:44 -0500 "Bill Day" <[EMAIL PROTECTED]> wrote: > using apache a proxy to "masquerade" you internal boxes..? I know > ipchains are a thing of the past. but there is a very good reliable > firewall/masquerade program call PMFirewall. I have used it for a long > time with out any major problems. Ihave used it on dialup and with > broadband. They(PMFirewall code gurus) are currently working on a IPTable > program as well.. they have a beta but it is not ready to "get around". Apache does this quite well. I am not unhappy with what it is doing. It is just that as Apache is no longer serving local content, maybe something that is primarily a server would be a better proxy. External proxy connections are attempted on port 80, just like regular http requests. I don't want to block port 80, as we do have a valid server there. It is the content of the commands on port 80, not who they are from, that triggers the blocking. At least I think it is this way. In fact, we have our internal proxy on a non-standard port. -- ++===+ | Roger Oberholtzer | E-mail:[EMAIL PROTECTED] | | OPQ Systems AB | WWW: http://www.opq.se/ | | Erik Dahlbergsgatan 41-43 |Phone: Int + 46 8 314223 | | 115 32 Stockholm | Mobile: Int + 46 733 621657 | | Sweden | Fax: Int + 46 8 302602 | ++===+ ___ Linux-users mailing list [EMAIL PROTECTED] Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
Re: httpd proxy
using apache a proxy to "masquerade" you internal boxes..? I know ipchains are a thing of the past. but there is a very good reliable firewall/masquerade program call PMFirewall. I have used it for a long time with out any major problems. Ihave used it on dialup and with broadband. They(PMFirewall code gurus) are currently working on a IPTable program as well.. they have a beta but it is not ready to "get around". Bill Day Linux 2.2.20-1tr i586 8:10am up 17:30, 1 user, load average: 0.00, 0.00, 0.00 - Original Message - From: "Roger Oberholtzer" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 27, 2002 4:14 AM Subject: Re: httpd proxy > On Fri, 27 Sep 2002 16:57:47 +0800 > "m.w.chang" <[EMAIL PROTECTED]> wrote: > > > I am using squid... havne't checked out the apache possibility. thanks > > for the info. still quite afraid to compile apaache + mods... > > It doesn't bite. > > > -- > ++===+ > | Roger Oberholtzer | E-mail:[EMAIL PROTECTED] | > | OPQ Systems AB | WWW: http://www.opq.se/ | > | Erik Dahlbergsgatan 41-43 |Phone: Int + 46 8 314223 | > | 115 32 Stockholm | Mobile: Int + 46 733 621657 | > | Sweden | Fax: Int + 46 8 302602 | > ++===+ > > ___ > Linux-users mailing list > [EMAIL PROTECTED] > Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.391 / Virus Database: 222 - Release Date: 9/19/02 ___ Linux-users mailing list [EMAIL PROTECTED] Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
Re: httpd proxy
On Fri, 27 Sep 2002 16:57:47 +0800 "m.w.chang" <[EMAIL PROTECTED]> wrote: > I am using squid... havne't checked out the apache possibility. thanks > for the info. still quite afraid to compile apaache + mods... It doesn't bite. -- ++===+ | Roger Oberholtzer | E-mail:[EMAIL PROTECTED] | | OPQ Systems AB | WWW: http://www.opq.se/ | | Erik Dahlbergsgatan 41-43 |Phone: Int + 46 8 314223 | | 115 32 Stockholm | Mobile: Int + 46 733 621657 | | Sweden | Fax: Int + 46 8 302602 | ++===+ ___ Linux-users mailing list [EMAIL PROTECTED] Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
Re: httpd proxy
I am using squid... havne't checked out the apache possibility. thanks for the info. still quite afraid to compile apaache + mods... >>you meant squid? ignore me if it was not. > > No. I currently use Apache as a proxy. Always have. Works nice. It is only > a proxy for internal boxes accessing the outside. All other proxy requests > are ignored. > -- Swiftly. Silently. Invisibly. .~. In Linux we trust. / v \ news://news.hkpcug.org /( _ )\ http://www.linux-sxs.org ^ ^ ___ Linux-users mailing list [EMAIL PROTECTED] Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
Re: httpd proxy
On Fri, 27 Sep 2002 15:38:55 +0800 "m.w.chang" <[EMAIL PROTECTED]> wrote: > you meant squid? ignore me if it was not. No. I currently use Apache as a proxy. Always have. Works nice. It is only a proxy for internal boxes accessing the outside. All other proxy requests are ignored. > > Roger Oberholtzer wrote: > > I always used to use Apache as an httpd proxy. However, what experience > > has anyone had with alternatives? Good bad things. Gottchas. > > -- > Swiftly. Silently. Invisibly. .~. In Linux we trust. > / v \ > news://news.hkpcug.org /( _ )\ http://www.linux-sxs.org > ^ ^ > > ___ > Linux-users mailing list > [EMAIL PROTECTED] > Unsubscribe/Suspend/Etc -> > http://www.linux-sxs.org/mailman/listinfo/linux-users -- ++===+ | Roger Oberholtzer | E-mail:[EMAIL PROTECTED] | | OPQ Systems AB | WWW: http://www.opq.se/ | | Erik Dahlbergsgatan 41-43 |Phone: Int + 46 8 314223 | | 115 32 Stockholm | Mobile: Int + 46 733 621657 | | Sweden | Fax: Int + 46 8 302602 | ++===+ ___ Linux-users mailing list [EMAIL PROTECTED] Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
Re: httpd proxy
you meant squid? ignore me if it was not. Roger Oberholtzer wrote: > I always used to use Apache as an httpd proxy. However, what experience > has anyone had with alternatives? Good bad things. Gottchas. -- Swiftly. Silently. Invisibly. .~. In Linux we trust. / v \ news://news.hkpcug.org /( _ )\ http://www.linux-sxs.org ^ ^ ___ Linux-users mailing list [EMAIL PROTECTED] Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
httpd proxy
I always used to use Apache as an httpd proxy. However, what experience has anyone had with alternatives? Good bad things. Gottchas. I know about squid, but I am not really looking for an intelligent cache. Just a proxy. It should handle ftp and https as well. Any suggestions? -- ++===+ | Roger Oberholtzer | E-mail:[EMAIL PROTECTED] | | OPQ Systems AB | WWW: http://www.opq.se/ | | Erik Dahlbergsgatan 41-43 |Phone: Int + 46 8 314223 | | 115 32 Stockholm | Mobile: Int + 46 733 621657 | | Sweden | Fax: Int + 46 8 302602 | ++===+ ___ Linux-users mailing list [EMAIL PROTECTED] Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users
