T.R | Title | User | Personal Name | Date | Lines |
---|
1755.1 | | NCMAIL::SMITHB | | Sun Feb 02 1997 09:46 | 1 |
| Yeah, disable the web relay and punch a hole in the screen for port 80...
|
1755.2 | NT Version | TENNIS::KAM | AltaVista Software 714/261-4133 DTN 535.4133 | Sun Feb 02 1997 11:48 | 9 |
| I assume when you mean punch a hole you're referring to 'screend'? I
forgot to mention that this is the AltaVista Firewall for Windows NT,
which only supply Application-level Proxies and the 'screend'
equivalent won't be available until the next version.
Therefore, I assume that in the NT version this would not be possible?
Regards,
|
1755.3 | | BIGUN::nessus.cao.dec.com::Mayne | Wake up, time to die | Sun Feb 02 1997 17:00 | 3 |
| Besides which, not all Web servers work on port 80...
PJDM
|
1755.4 | | NCMAIL::SMITHB | | Mon Feb 03 1997 09:37 | 1 |
| Then you are stuck unless you recommend a different firewall...
|
1755.5 | | QUICHE::PITT | Alph a ha is better than no VAX! | Wed Feb 05 1997 08:29 | 11 |
| I have previously had a discussion with firewall engineering about the
possibility of a transparent WWW proxy. It was only during this
discussion that I became aware (for which, read Mark Smith gently
pointed out to me!) that this cannot ever be a total solution.
The problem is that a transparent proxy is tied to a particular port
number. In order to do transparent WWW proxy, you would have to tie it
to every port number on which anyone ever runs a WWW Server - that list
is infinite ...
T
|