From owner-freebsd-questions Tue Jun 2 23:34:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA04863 for freebsd-questions-outgoing; Tue, 2 Jun 1998 23:34:52 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from gdi.uoregon.edu (gdi.uoregon.edu [128.223.170.30]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA04837 for ; Tue, 2 Jun 1998 23:34:44 -0700 (PDT) (envelope-from dwhite@gdi.uoregon.edu) Received: from localhost (dwhite@localhost) by gdi.uoregon.edu (8.8.8/8.8.8) with SMTP id XAA22624; Tue, 2 Jun 1998 23:34:42 -0700 (PDT) (envelope-from dwhite@gdi.uoregon.edu) Date: Tue, 2 Jun 1998 23:34:42 -0700 (PDT) From: Doug White Reply-To: Doug White To: mel kravitz cc: freebsd-questions@FreeBSD.ORG Subject: Re: httpd server hosted from ip other than NS In-Reply-To: <35734ECD.41C67EA6@i-2000.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, 1 Jun 1998, mel kravitz wrote: > Hi, > How can i set up apache server on on a lan box rather than on the ns > box? My setup: > IN-->56KDSU/router<---tx0---->FreeBSD(Dual homed host & ns > &firewall)--tx1&tx0--hub#1 > > hub#1<--------->tx0--Freebsd/httpd &dialin server & mail-server. > > -----tx1---->hub#2---office machines(win95), building a tight firewall > says that httpd server , and mail server should not be contained in this > box. > thanks in advance-mel There are different theories on how to set this up depending on what you need your firewall to do. The one I've seen the most about involves setting up a supersecure `bastion host' outside the firewall, then allow the services you want to come through the firewall only from the bastion host. I'd suggest looking into some good security books & resources for other ideas. Doug White | University of Oregon Internet: dwhite@resnet.uoregon.edu | Residence Networking Assistant http://gladstone.uoregon.edu/~dwhite | Computer Science Major To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message