Re: Squid 1.120

Peter,

For the mail server, the TIS firewall toolkit (http://www.tis.com/) has a program
("smap") that forwards your mail from the outside to inside the firewall, I am
using it successfully. I gather your firewall is UNIX?

For the web server, I assume it's your external webserver (which publishes docs to
the Internet). Bad idea to have it behind your only firewall, if a hacker gets into
it he/she might do ugly things to your network. The usual way to handle that is
using a DeMilitarized Zone ("DMZ"):

Internet
     |
Firewall -- DMZ
     |
Intranet

OR (even better):

Internet
     |
External Firewall
     |
   DMZ
     |
Internal Firewall
     |
Intranet

In the DMZ you put your externally-accessible webservers, and the Internal Firewall
protects your network vs. anyone who might get into your external webserver.

Hope this helps,
-Mario.

Peter Salvage wrote:

> Hi all
>
> Could someone point me to a decent reference - or assist :-) - with the
> following:
>
> I would like to run both my mail server AND web server behind the proxy, and not
> just my private network. Is this feasible, seeing as we use NT for mail and web
> and host a bnunch of virtual domains as well?
>
> TIA
> Peter Salvage
Received on Tue Oct 27 1998 - 16:11:29 MST