Firewalls: Placement of WWW Server

Firewalls
(August 1995)

Indexed By Thread: [Previous] [Next]

Subject:	Placement of WWW Server - any thoughts?
From:	Alex Sharpe <ASHARPE @ bass . rssi . com>
Date:	Wed, 30 Aug 95 16:52:00 PDT
To:	"'firewalls-owner'" <firewalls @ GreatCircle . COM>
Encoding:	10 TEXT

We are installing a Web Server that we want to give the world access to, but 
are not sure of our security architecture yet.  We are kicking around 
several ideas including the idea of only allowing HTTP to pass through our 
FIREWALL if it is destined for the Web server.  We are considering doing 
this by filtering on the Web Server's IP address and HTTP port number.

What do you think?  What are the residual risks?

Alex .
 Sharpe @
 rssi .
 com

Follow-Ups:

Re: Placement of WWW Server - any thoughts?
From: paul @ hawksbill . sprintmrn . com (Paul Ferguson)

Indexed By Date	Previous:	Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 From: Christian Wettergren <cwe @ Csli . Stanford . EDU>
Indexed By Date	Next:	Re: syslog overruns and TIS smap From: wbunting @ ch . inri . com (Bill Bunting)
Indexed By Thread	Previous:	Re: [8lgm]-Advisory-22.UNIX.syslog.2-Aug-1995 From: Christian Wettergren <cwe @ Csli . Stanford . EDU>
Indexed By Thread	Next:	Re: Placement of WWW Server - any thoughts? From: paul @ hawksbill . sprintmrn . com (Paul Ferguson)