New one: Securing an HTTP server

Firewalls (Firewallsexchange.ware.net)
Wed, 2 Sep 1998 11:29:08 -0700

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Stout, Bill: "Penetration testing via shrinkware"
• Previous message: Aleph One: "Re: Re[2]: password aging"
• Next in thread: Ben: "Re: New one: Securing an HTTP server"
• Reply: Ben: "Re: New one: Securing an HTTP server"
• Reply: Chad Schieken: "Re: New one: Securing an HTTP server"

Turns out the ftp is out and HTTP is in.

Basically we want to server confidential documents to end user internet
customers.

SSL encryption will be used, however we need to pull the documents off a
"server" inside
our corporate network.

I'd like recommendations on the "best way" to serve these files without
exposing the inside
server.

Here's a simple drawing of what we are considering:

User ----> Public HTTP Server (colocation provider)----> Private Network
---> Cisco PIX ---> Corporate HTTP Server

Specifically I'm looking for recommendations on the proxy code for the
public server, Unix or NT is acceptable.

TIA,

• Next message: Stout, Bill: "Penetration testing via shrinkware"
• Previous message: Aleph One: "Re: Re[2]: password aging"
• Next in thread: Ben: "Re: New one: Securing an HTTP server"
• Reply: Ben: "Re: New one: Securing an HTTP server"
• Reply: Chad Schieken: "Re: New one: Securing an HTTP server"

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:11:46 CDT