Hi all, I have question on design the firewall on the web server My idea is like that Internet --------(firewall 1) --------(Proxy)---------(firewall 2)--------- Web Server I need most secure setting on that. Any suggestion? Thank Alan Au
On Sunday 14 October 2001 09:17 am, Alan wrote:
Hi all, I have question on design the firewall on the web server My idea is like that
Internet --------(firewall 1) --------(Proxy)---------(firewall 2)--------- Web Server
I need most secure setting on that. Any suggestion?
We will probably need more details on what you are trying to accomplish. What is the reason for the two firewalls, and what will be filtered by each? Are you masquerading, and if so, on which firewall? Will firewall 1 be allowing some inbound traffic, in effect making the network between firewalls 1 and 2 a DMZ? If so, what else besides the proxy will be on it? Scott -- -----------------------+------------------------------------------------------ Scott Courtney | "I don't mind Microsoft making money. I mind them courtney@4th.com | having a bad operating system." -- Linus Torvalds http://www.4th.com/ | ("The Rebel Code," NY Times, 21 February 1999)
On Sunday 14 October 2001 09:17 am, Alan wrote:
Hi all, I have question on design the firewall on the web server My idea is
Internet --------(firewall 1 [X.X.X.10]:80) --------(3128 :Proxy:
80)---------( 80: firewall 2:80)---------80:Web Server
If someone what to access my web server (X.X.X.10) Public IP.
Then the first firewall will only forward the traffic to this ip port 80 and
443. to the proxy server..
Next is proxy server will need pass through the firewall 2 and go in the Web
server ( Private IP)
Two question :
The first is how to use squid to build reverse proxy server and tell that
server to go to the web server get information.
Because the normal user from outside.. They don't know the setting how to
.....
The second is Proxy to firewall 2 ... I will use port forward function.
Thank
Alan Au
----- Original Message -----
From: "Scott Courtney"
that
Internet --------(firewall 1) --------(Proxy)---------(firewall 2)--------- Web Server
I need most secure setting on that. Any suggestion?
We will probably need more details on what you are trying to accomplish.
What is the reason for the two firewalls, and what will be filtered by each? Are you masquerading, and if so, on which firewall? Will firewall 1 be allowing some inbound traffic, in effect making the network between firewalls 1 and 2 a DMZ? If so, what else besides the proxy will be on it?
Scott
-- -----------------------+--------------------------------------------------
Scott Courtney | "I don't mind Microsoft making money. I mind them courtney@4th.com | having a bad operating system." -- Linus Torvalds http://www.4th.com/ | ("The Rebel Code," NY Times, 21 February 1999)
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
participants (2)
-
Alan
-
Scott Courtney