Great Circle Associates Firewalls
(February 1998)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: URL rewriting
From: MacGyver <macgyver @ tos . net>
Date: Mon, 09 Feb 1998 22:52:28 -0600
To: Gregory Perry <gperry @ tcs-sec . com>, firewalls @ GreatCircle . COM
In-reply-to: <3 . 0 . 5 . 32 . 19980209133016 . 007d7550 @ lambic>

-----BEGIN PGP SIGNED MESSAGE-----

At 01:30 PM 2/9/98 -0500, Gregory Perry wrote:
>	
>Does anyone have experience with a public domain or commercial product that
>can effectively mask internal web servers via URL rewriting?  i.e. you have
>an insecure internal segment attached to an external secure gateway, sort
>of a reverse proxy if you will - all HREF's would be rewritten and
>forwarded to the external browser effectively hiding the origination
>IP/hostname and/or path specifics of the internal web servers.
>
>Anyone?

Netscape Proxy Server will do what you're looking for.  It's got a
reasonably powerful reverse-proxy mechanism.  I've actually never tried to
do path-specific hiding...although I suspect there are probably hidden
problems with doing something like that.  However IP/hostname
reverse-proxying works great.  I'm not sure what other industrial-strength
reverse-proxies are out there.  I think I saw something once about an
Apache module that'd do it, but I've not personally looked into it.

Hope this helps...

Habeeb.

- --
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        ^               Habeeb J. Dihu
     -'   `-            Managing Senior Technologist
   " '     ` "          Cirrus Technologies
 "  '       `  "        
"  '      .  `  "                  
"  '    .' ` `  "       'I don't believe in the no-win scenario'
 " `   '    `' "           -- Captain James T. Kirk,  Star Trek II: TWK
   `  ' _  _ '          'There is an old Vulcan proverb, `Only Nixon 
    '                    could go to China.`'
                           -- Captain Spock, Star Trek VI: TUC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-----BEGIN PGP SIGNATURE-----
Version: PGP for Business Security 5.5.2

iQCVAwUBNN/dC1TtNfTWxXdNAQFwngP/agoys/VMeaaduZbFoTld07WQXCemqCst
OSCiQQqnky729JwcYGCp+pDEJjv8CoZWhaNOEiYLQXwlNhFW8GDQWc0hKx1guhux
Eru617c5BXX+TySdYPTSc8v3N92NB+qYJniGlpleBIJoc90+HrAnjcElS7coLHSr
9rUKLSivf+I=
=sI+8
-----END PGP SIGNATURE-----



References:
Indexed By Date Previous: Re: What app uses port #7?
From: MacGyver <macgyver @ tos . net>
Next: Re: http server for bastion host
From: rdew @ el . nec . com (Bob De Witt)
Indexed By Thread Previous: URL rewriting
From: Gregory Perry <gperry @ tcs-sec . com>
Next: Re: URL rewriting
From: Valakas Antonis <valakas @ intrasoft . gr>

Google
 
Search Internet Search www.greatcircle.com