Article View: nz.comp
Article #221Re: Apache WWW server - A good firewall? - how hard to set up?
From: Daryle Niedermayer
Date: Fri, 26 Jun 1998 00:00
Date: Fri, 26 Jun 1998 00:00
78 lines
3444 bytes
3444 bytes
This is a multi-part message in MIME format.
--------------671E2D86DF4FE525116C54A8
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hmmm. Apache is just a web server isn't it? If you mean using the linux as
a firewall and running apache as well, that's possible. Conventional
wisdom says that a firewall box (of which Linux is a very good candidate)
should have as few additional services as possible, so putting apache on
top of it would violate that wisdom. Still it is possible, but I would
recommend two Linux boxes: one for a firewall and the other for the apache
web server which can be outside of the firewall (if you want an internet
and/or intranet) or inside (if you want an intranet alone):
Internet <----------------->Firewall Box <-----------------> Internal
Network
|
Apache Server (in DMZ)
The firewall could be a masquerading or proxy type. The /usr/doc/HOWTO
files with RH 5.x contain excellent help on how to make all this happen.
Paul Robertson wrote:
> Our office has a NT4 server and a network of 25 pc's. We use MS Proxy
> Server to allow internet access but for the moment we are not allowing
> any incoming traffic. I want to connect it to the internet via our
> ISDN connection. An industrial strength firewall is called for. I have
> priced commercial firewalls but they are quite expensive. I wondered
> whether we could run Apache as a firewall on a separate server under
> Linux..
>
> Suggestions..
>
> Paul Robertson
> Auckland
> prob@usa.net <home>
> par@heaneyco.co.nz <work>
--
********************************
Daryle Niedermayer
Programmer/Analyst
GDS & Associates Systems. Ltd.
400 - 4211 Albert St.
Regina, SK Canada -- S4S 3R6
Phone: 306.586.7832
Fax: 306.585.1514
email: dniederm@gds.ca
http://www.gds.ca
********************************
--------------671E2D86DF4FE525116C54A8
Content-Type: text/x-vcard; charset=us-ascii; name="vcard.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Daryle Niedermayer
Content-Disposition: attachment; filename="vcard.vcf"
begin: vcard
fn: Daryle Niedermayer
n: Niedermayer;Daryle
org: GDS & Associates Systems Ltd.
adr: 400 - 4211 Albert St.;;;Regina;SK;S4S 3R6;Canada
email;internet: dniederm@gds.ca
title: Programmer/Analyst
tel;work: 306.586.7832
tel;fax: 306.585.1514
x-mozilla-cpt: ;-2112
x-mozilla-html: FALSE
version: 2.1
end: vcard
--------------671E2D86DF4FE525116C54A8--
Technical Details
Message-ID:
<3593BDD5.7B56186B@gds.ca>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<35947146.477110082@news.kcbbs.gen.nz>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 102983,6d5cdc1deeda6866 X-Google-Attributes: gid102983,public X-Google-Thread: 106e5e,6d5cdc1deeda6866 X-Google-Attributes: gid106e5e,public X-Google-Thread: 10669a,6d5cdc1deeda6866 X-Google-Attributes: gid10669a,public From: Daryle Niedermayer <dniederm@gds.ca> Subject: Re: Apache WWW server - A good firewall? - how hard to set up? Date: 1998/06/26 Message-ID: <3593BDD5.7B56186B@gds.ca> X-Deja-AN: 366323446 References: <35947146.477110082@news.kcbbs.gen.nz> Mime-Version: 1.0 To: prob@usa.net Content-Type: multipart/mixed; boundary="------------671E2D86DF4FE525116C54A8" Organization: GDS & Associates Systems Ltd. Newsgroups: nz.comp,comp.os.linux.networking,aus.computers.linux