Article View: nz.comp
Article #220Re: Apache WWW server - A good firewall? - how hard to set up?
From: Ian
Date: Fri, 26 Jun 1998 00:00
Date: Fri, 26 Jun 1998 00:00
40 lines
2853 bytes
2853 bytes
In article <35947146.477110082@news.kcbbs.gen.nz>,
prob@usa.net (Paul Robertson) writes:
> Our office has a NT4 server and a network of 25 pc's. We use MS
> Proxy Server to allow internet access but for the moment we are not
> allowing any incoming traffic. I want to connect it to the internet
> via our ISDN connection. An industrial strength firewall is called
> for. I have priced commercial firewalls but they are quite
> expensive. I wondered whether we could run Apache as a firewall on a
> separate server under Linux..
Apache's not a firewall, it can act as a WWW proxy, but a WWW proxy
and a proxy firewall are two different things. You'll need to install
the linux firewall in the kernel (just config the kernel, the source
is already there) and configure some firewall rules, read the firewall
HOWTOs for more info on that. Unless the linux box can connect to the
net without going through the MS firewall, no incoming connections
will come through unless the MS firewall is configured to let them
through, if it's up to doing that. The linux firewall is very secure
and flexible, I heard nothing but bad things about Microsoft's while I
was supporting the leading firewall (checkpoint) for a living. They
don't appear to have much of an idea about security.
If you're trying to set up a WWW server, then you've not made it clear
if the ISDN connection is what's connecting your office to the net, or
what's connecting your machine to the net. If you want to provide a
web server via ISDN, there's precious little point as no-one can
connect unless the ISDN link is up or your ISP will dial you when an
incoming connection reaches them.
Basically, you've not made it clear what you're trying to do, where
the linux box is on the network, and what kind of network connection
you've got, so anyone trying to provide answers is going to have to
guess a lot! Please provide more info.
--
Ian - Edit address before mailing. | Have you got a question you want to ask
Running Linux in the UK. | Usenet? Search www.dejanews.com first!
-- There are no facts, only opinions --
Technical Details
Message-ID:
<6n0a0b$1u8$2@firewall.tarcus.org.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<35947146.477110082@news.kcbbs.gen.nz>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 106e5e,6d5cdc1deeda6866 X-Google-Attributes: gid106e5e,public X-Google-Thread: 102983,6d5cdc1deeda6866 X-Google-Attributes: gid102983,public X-Google-Thread: 10669a,6d5cdc1deeda6866 X-Google-Attributes: gid10669a,public From: ianr@pobox.DUMPTHISBIT.quza.com (Ian) Subject: Re: Apache WWW server - A good firewall? - how hard to set up? Date: 1998/06/26 Message-ID: <6n0a0b$1u8$2@firewall.tarcus.org.uk> X-Deja-AN: 366323445 References: <35947146.477110082@news.kcbbs.gen.nz> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Organization: Private site Newsgroups: nz.comp,comp.os.linux.networking,aus.computers.linux