Re: Possibly unusual proxy/filter

["Robert Collins" <robert.collins () itdomain com au>]

<semi-plug mode>Have you considered squid? running as a httpd-accelerator it
still supports ACL's on the urls requested, and also the use of a redirector
for url manipulation (if you want that). The inbuilt ACL's can be regex
based, allowing a fair degree of flexability.
</plug mode>
While it's not a firewall it does meet your requirements..

Rob


----- Original Message -----
From: "John McDermott" <jjm () jkintl com>
To: "Firewall Wizards" <firewall-wizards () nfr net>
Sent: Tuesday, September 19, 2000 9:50 AM
Subject: [fw-wiz] Possibly unusual proxy/filter


> I manage a system that provides a web service.  We serve port 80 on one
> machine (call it "A") and some ports on other machines that are not an
> issue.  What I'd like to do is to put an inbound ("reverse") proxy in
> front of the web server such that the proxy can allow access only to
> specified pages and scripts.  (Sort of a reverse "content filter".)  I
> know that through proper Apache configuration I can clearly limit
> access, but I'm looking for another layer of "depth" in the protection.
> It'd be nice if I could even validate the arguments to cgi-scripts, but
> that may be asking too much.
>
> Right now we have a system running FW-1, but "it doesn't seem to be able
> to do what I want" and management is looking for something less
> expensive...  A solution that could use Linux would be great as
> everything else in our environment is Linux.
>
> I saw the note about zorp, but it looks to be pretty early in its life
> cycle.
<snip>


_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards