-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HTTP, FTP, Telnet, SSL, NNTP and E-Mail all use TCP and can be easily
tunnelled or used through a proxy system, Messaging and Streaming video
may use UDP and that makes it VERY hard.

Here are some notes that may help..

1. HTTP,FTP

MANY proxy servers exists for this purpose.  For Secure Http (HTTPS) you
would be best with an HTTP 1.1 compat proxy.

For UNIX, you may try SQUID.

1a. News (NNTP)

NNTP is like E-Mail, it doesn't use a proxy so much as it is stored on a
local server, put a news server on it.

2. Telnet

For this you need a SOCKS proxy.  The open source "Dante'" could do it,
there are many others as well.  Try and get SOCKS5 also known as AFT
(Authenticated Firewall Traversal) protocol.  Most good telnet clients
have support for this.  SOCKS proxies do not speed up access by caching
like HTTP/FTP proxies can.  Your NNTP (News) server can connect through
a SOCKS proxy if it supports it.

3. Streaming Video/Audio Service

You may try a SOCKS proxy (like with telnet), QuickTime has native
SOCKS5 support.  Other apps may need a wrapper like SocksCAP (from NEC)
or Hummingbird Socks.  Some streaming video formats are supported by
HTTP (especially HTTP 1.1 with "CONNECT") proxies, your mileage may
vary, but you should check the package you are using to see what it
supports.

4. Messenger Service

Unfortunately, many messenger services (including CUSeeMe) etc don't
even support NATting (I am not sure about PATting, but I doubt that
would work with more than one user) because they send back an IP to the
other host and it is configured for certain ports on that and only that
IP.  You could try a SOCKS proxy, some use a HTTP proxy though (HTTP 1.1
CONNECT).  This one is the hardest.

Remember that proxies can proxy IN as well as out.. be very careful with
your setting it up, you could be giving someone a nice way through your
firewall, and a good trusted IP for TCP connections.  Tunnelling through
HTTP proxies is VERY easy.

Personally I would go with Dante' and Squid.  Both are Open Source and
so you can not only be assured many people have looked through the code
and squeezed out the bad bits, but you can modify it to your needs or
platform with no restrictions.  Both of these products are also free to
use in a commercial environment with no licensing fees.  Squid is a
relatively high performance HTTP proxy that will speed up web access for
frequently visited web sites, but it is very RAM and disk intensive if
you want to get a great performance benefit.  Dante' offers no
performance benefit, only connectivity and possible security benefits
(if configured properly).

The default ports for these services are:

HTTP - TCP Port 80
HTTPS - TCP Port 443
FTP - TCP Port 21 and port 20
NTTP (News) - TCP Port 119
TELNET - TCP Port 23
Streaming Video - Various
Messaging services - All sorts of TCP and UDP ports.

HTTP Proxy: 
- From intranet users: (TCP only) 3129, 3128, 8080, 8000, 81 and 80 are
the common ones.
No inbound needed from outside.

SOCKS proxy: 
- From intranet users: (TCP only for Socks 4, TCP or UDP for SOCKS5)
1080 is the common one.
Inbound connections can be set up, all inbound ports above 1024 should
be allowed in to the socks client (or above 0 if it is set up with priv
inbound) except 1080 (usually).  Clients can request a temporary  open
inbound port for accepting connections (this can usually be disabled).

I really hope you have some information that you didn't have before.

- -- Benjamin Holmes
Getronics, Brisbane.  http://www.getronics.com

> -----Original Message-----
> From: Jared C. Lovell [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, 15 December 2001 8:27 AM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: Re: Which Proxy Server...
> 
> 
> 
> Apache (www.apache.org) w/ mod_proxy works fine for http.  
> Apache builds
> under most anything.  For the others, I'm not sure you want a 
> proxy server
> so much as a NAT service.  I've never heard of a telnet "proxy", since
> it's interactive (ie, not stateless file serving like http).
> 
> Hope that helps.  
> 
> - Jared Lovell
> 
> 
> On Fri, 14 Dec 2001 [EMAIL PROTECTED] wrote:
> 
> > Dear users,
> >             I am planning to upgrade my Proxy Server. It 
> runs on IBM AIX(Unix Like)
> > operating system. I tried to search Proxy Server for Unix 
> on Internet.
> > But the results were not much and also their performances 
> were unknown.
> > Can you help me out to select a suitable one proxying the following
> > services, at least:
> > 1. HTTP,FTP,news
> > 2. Telnet
> > 3. Streaming Video/Audio Service
> > 4. Messanger Service
> > 
> > I need the Proxy Server to run on Unix like Operating System only.
> > 
> > Rakesh
> > ======
> > 
> > 
> > -------------------------------------------------
> > 
> > 
> 

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
Comment: Pee Gee Peeeeee!

iQA/AwUBPB8UgXLvuelW5gClEQKV4gCghj+ZpoLEjwfODvuwCFza7Pjrm4cAn0vk
iRydni4dUyiDPnm9eN1gqEfl
=pfaL
-----END PGP SIGNATURE-----

Reply via email to