Re: Securing Servers

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



* Thus wrote Stephen Craton:
> Hello,
> 
> I'm in the process of hooking up my own personal web server for use by
> certain clients to view the progress on work I'm doing for them. However,
> I'm on a shared network that is behind a firewall and some computers on the
> network need to stay secure as possible. I've heard that if you gain access
> to one computer, the whole thing is vulnerable.

If you have an existing webserver on the outside of the firewall, I
would suggest that, if possible, to set up that webserver to proxy
stuff directly to your server. As the simple diagram shows below.


*internet*
 | 
 |
*public webserver* (proxy via internal network)
 |
 |
----- firewall ----
 | <-internal network
 | 
*your computer*

With this method, no security whole is opened at the firewall. Only
at the web server, which is transparent to the normal user.  And
since the public webserver only makes direct contact with your
computer, the entire network isn't compromised.

 

Curt
-- 
The above comments may offend you. flame at will.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux