Great Circle Associates Firewalls
(September 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewall-1 + CERN http proxy
From: Ryan Russell/SYBASE <Ryan . Russell @ sybase . com>
Date: 22 Sep 96 13:08:59 EDT
To: Fletcher Cocquyt <fletcherc @ ttmc . com>
Cc: firewalls <firewalls @ sybase . com>, fletch <fletch @ ttmc . com>

They certainly won't both run on the same machine, they'd
be trying to listen on the same port..

    Ryan

---------- Previous Message ----------
To: firewalls
cc: fletch
From: fletcherc @ ttmc.com (Fletcher Cocquyt) @ smtp
Date: 09/22/96 12:16:28 PM
Subject: Firewall-1 + CERN http proxy

Greeting Firewallers,

 Forgive me if this has been asked recently or is covered in some other
FAQ, but I have a question regarding Firewall-1 and the CERN http proxy:

Is it possible to substitute the CERN httpd which does caching for the
Firewall-1 http proxy which does not do caching?  If Sun's product did the
caching, I would not be playing around with CERN's proxy...Sunservice does
not know if it is possible...but they are checking...no word why caching isn't
a feature of their product either.

First of all, I can get either the CERN proxy going OR the SUN Firewall, but 
not both products at the same time.

What I have tried:

1) Substituting CERN's firewall in the $FWDIR/fwauthd.conf file:
 Nothing seemed to get through - although the http daemon did startup
2) Starting CERN's proxy first then Firewall-1:
 CERN's proxy locks up after Firewall-1 is started.

Details:  This is a Sparc10 running Solaris2.5 with Firewall-1 2.0 (eval -
I know there is a 2.1) and CERN http server/proxy v3.0A

Anyone with some advice (Do other products do more and do it better?) - 
One product would be better than two naturally!

TIA,

----------------------------------------------------------------------
Fletcher Cocquyt  fletch @
 ttmc .
 com  (441) 299-2900
System Administrator Trout Trading   Hamilton, Bermuda 
----------------------------------------------------------------------







Indexed By Date Previous: SATAN
From: gfarouk @ iti-idsc (Ghada Farouk)
Next: Re: IP spoofing
From: Adam Shostack <adam @ homeport . org>
Indexed By Thread Previous: Firewall-1 + CERN http proxy
From: Fletcher Cocquyt <fletcherc @ ttmc . com>
Next: Re: Firewall-1 + CERN http proxy
From: Adam Safier <asafier @ csc . com>

Google
 
Search Internet Search www.greatcircle.com