From owner-freebsd-isp  Mon Mar 11 21:59:48 1996
Return-Path: owner-isp
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id VAA02053
          for isp-outgoing; Mon, 11 Mar 1996 21:59:48 -0800 (PST)
Received: from tulpi.interconnect.com.au (root@tulpi.interconnect.com.au [192.189.54.18])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id VAA02042
          for <freebsd-isp@FreeBSD.ORG>; Mon, 11 Mar 1996 21:59:43 -0800 (PST)
Received: (from ahill@localhost) by tulpi.interconnect.com.au id QAA22168
  (8.6.11/IDA-1.6); Tue, 12 Mar 1996 16:59:09 +1100
Date: Tue, 12 Mar 1996 16:59:08 +1100 (EST)
From: Anthony Hill <ahill@interconnect.com.au>
To: "Helio Coelho Jr. - CompuLand Informatica" <compland@ism.com.br>
cc: freebsd-isp@FreeBSD.ORG
Subject: Re: proxy server
In-Reply-To: <199603091941.QAA05819@unix1.ism.com.br>
Message-ID: <Pine.BSI.3.91.960312165246.21444B-100000@tulpi.interconnect.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk


> Can someone suggest me a proxy server to combine with apache httpd ?
> 
> Question: There is any sense in putting two ethernet controlers in a proxy
> server to phisically separate the internal (protected) network from
> the external ?

Sure is.......then you can use the catch-phrase of the year, and tell people 
you've got a firewall. (half a firewall anyway).

Now if you deny all connection requests from the external network to the 
internal network, you will make the hackers job that much harder.
(You will however need to get your users to use an ftp client capable of 
passive mode ftp, or get them to use a web browser.)

> 
> TIA!
> Helio.
> 
>