Re: Apache behind/in front of gateway

From: G.T. (ethan_t_at_sbcglobal.net)
Date: 01/18/04 

Date: Sun, 18 Jan 2004 18:41:17 GMT

"Dr. O" <dr.o@xxxxx> wrote in message
news:400a52ce$0$124$3b62cedd@news.wanadoo.nl...
>
> "Peter Matulis" <1@1.com> wrote in message
> news:kkuj001ljt5tb8n5k8dnmd5oranmugl84u@4ax.com...
> > On Sat, 17 Jan 2004 13:06:45 +0100, "Dr. O" <dr.o@xxxxx> wrote:
> >
> > >Hi,
> > >
> > >I'm trying to build a gateway using OpenBSD but I would like to put a
> > >webserver on the same machine as well. How can you make the webserver
> appear
> > >in front or behind the gateway/firewall? Is this done by altering the
PF
> > >tables? How do you 'bind' the webserver to one of the network cards?
> >
> > Who will be accessing the webserver? Inside clients or outside
> > (internet) clients? How do you define "front" and "behind"? It
> > depends who is accessing the server.
>
> Outside clients will be accessing the webserver, but inside clients should
> also be able to access it (to check it's functioning and to update the
> content). With in front of the gateway I mean that the webserver is
> basically 'on the Internet' and behind the gateway means it's basically on
> the corporate network but still accessible by Internet clients.
>

Make up your mind. You said the webserver will be on the same machine. Now
you're saying it's not. Either way, you should be fine. If they're on the
same machine you just need to open ports 80 (and 443 if necessary). On an
internal machine, you need to do some redirects and maybe NAT. On an
external or DMZ machine, similar issues as on the same machine.

It's all here in glorious detail: http://www.openbsd.org/faq/pf/index.html

Read it some time.

Greg

Relevant Pages

  • Re: localhost is all that will work
    ... What is the ServerBindings configured for this website? ... Bad Request message that I receive here as well. ... > - The client opens a connection to the webserver (works, ... > If this happens for all your clients on the Internet, ...
    (microsoft.public.inetserver.iis)
  • Re: localhost is all that will work
    ... The client opens a connection to the webserver (works, ... The webserver answers the request, ... If this happens for all your clients on the Internet, ... accessing the website from different parts of the ...
    (microsoft.public.inetserver.iis)
  • Where to put my IIS WebServer ?
    ... I need advice on proper placement of my webserver. ... the proper gateway on the internal NIC config...that this gateway will become ... becomse un reachable from the internet ...
    (microsoft.public.inetserver.iis.security)
  • Re: localhost is all that will work
    ... > Cisco PIX firewall which again my Internet provider assured me was properly ... >> webserver answers) ... >> If this happens for all your clients on the Internet, ... right click the website and click Properties. ...
    (microsoft.public.inetserver.iis)
  • Re: bridging
    ... we run it out a separate Internet connection all by itself. ... - If PIXs have different subnets on the Internal ... Then you add a second NIC to the Webserver and set it up ... the Default Gateway for the Web Server. ...
    (microsoft.public.win2000.networking)
Quantcast