Home page logo
/

basics logo Security Basics mailing list archives

Re: Web access to web server in private LAN
From: "Micheal Espinola Jr" <michealespinola () gmail com>
Date: Wed, 22 Feb 2006 14:41:17 -0500

It would be a security best practice to simply use a reverse proxy or
filtered port forwarding inward to the IIS box.

Putting this box on your DMZ would require many holes in your
firewall/filter/etc to facilitate Windows/NetBIOS/etc access.

On 2/21/06, Ivan . <ivanhec () gmail com> wrote:
Hi DM

Moving to the DMZ would be the best solution. Is there a reason that
they can't/wont move it? This could form part of your TRA, ie the
expensive to move out weighs the risks, etc..

Using a reverse proxy like Squid is OK, but not prefered.
http://squid.visolve.com/squid/reverseproxy.htm


cheers
Ivan

On 2/21/06, David Moneo <dummycerberus () gmail com> wrote:
Hello everybody,

my organization has an Apache web server for world wide access in the
DMZ. Right now, another department want to made their own IIS server
(installed on their private LAN) available from the Internet. How can
I manage that kind of access without moving the IIS to the DMZ? Could
I use a reverse proxy or something like that?

Thanks in advance and best regards

DM

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




--
ME2

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]