[Gllug] Accessing local web server from WAN

[Dylan]

On Monday 02 February 2004 07:29 am, Martin A. Brooks wrote:
> On Fri, 2004-01-30 at 20:17, Dylan wrote:
> > Is squid the best option? Any comments as to the security
> > implications?
>
> Yes, squid in reverse proxy mode will do what you expect. As for
> security, I not sure what you mean.  Any time you allow a service to
> be accessed by someone you don't know and trust you have security
> implications to consider.

Of course, but I figure that proxying the connection at the gateway is 
more secure than forwarding port 80 to a box inside the LAN. AIUI squid 
will process the requests and the 'real' server will only see requests 
coming from squid - making it easier to secure since the web server can 
be locked down to respond to one source IP only, etc...

Dylan

-- 
"They that can give up essential liberty to obtain a little 
temporary safety, deserve neither liberty nor safety." 
                                  -Benjamin Franklin

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug