NetFilter
[Top] [All Lists]

RE: iptables: hide the real web server from users

To: <netfilter@lists.netfilter.org>
Subject: RE: iptables: hide the real web server from users
From: "Rob Sterenborg" <rob@sterenborg.info>
Date: Wed, 14 Feb 2007 15:40:36 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <9255886c0702140508m53568059k728056f9fe10c8b8@mail.gmail.com>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
References: <354862.54159.qm@web33304.mail.mud.yahoo.com> <9255886c0702140508m53568059k728056f9fe10c8b8@mail.gmail.com>
Sender: netfilter-bounces@lists.netfilter.org
Thread-index: AcdQOT4vTiZQlsH3TOSmJ45c/09sEgADMBkg
netfilter-bounces@lists.netfilter.org wrote:
>    I don't think iptables is your best option for that.
>    Try mod_security, mod_rewrite or apache proxy .

Or Squid.


Grts,
Rob

> On 2/14/07, Tim Perton <grpanosgr@yahoo.com> wrote:
>> Dear friends,
>> I have a web server running on system B. I run my main
>> services to System B but I do not want my users to
>> talk to system B directly.
>> So I have another server (System A) in a differrent
>> ISP & a completely different C class IP address like below:
>> 
>> -----------------------------
>> --- System A (IP=a.b.c.d) ---
>> -----------------------------
>> 
>> -----------------------------
>> --- System B (IP=e.f.g.h) ---
>> -----------------------------
>> 
>> System A runs iptables(redhat EL4).
>> 
>> I want my users to do a request like
>> http://a.b.c.d/1.php and then machine A to make the
>> same request to System B, get the results and send
>> them back to the user transparently.
>> Practically System A to act as an intermediatery to the real machine
>> (System B). 
>> 
>> Any idea on how to do this?
>> 
>> Regards,
>> Tim Perton




<Prev in Thread] Current Thread [Next in Thread>