Topic: Advice on preventing http attacks

[CharlieBrady]

I am kind of ignorant of PHP ...

http://me.veekun.com/blog/2012/04/09/php-a-fractal-of-bad-design/

[ghorst352]

I am connected as follows:

(Nic1) Wan IP 69.69.x.x ---> DSL Modem
(Nic2) Internal IP ---> Internal Switch

SME Server: Server - Gateway

[Stefano]

I am connected as follows:

(Nic1) Wan IP 69.69.x.x ---> DSL Modem
(Nic2) Internal IP ---> Internal Switch

SME Server: Server - Gateway

ok, no doubt about it..
I repeat.. since your SME server has only an "internal" (i.e. on le lan side) use, it should not expose any service on the web, so you should change to server only and point to your dsl modem (modem or router?) as its default gateway..

[ghorst352]

The reason why I have it setup this way is per recommendation from SME staff.  I had asked the best method of setting up a transparent proxy and was advised on using 2 nics (1 for the outside and 1 for the inside) and to setup sme server as a Server - Gateway.  Is this not correct?

[ghorst352]

Refer to this thread http://forums.contribs.org/index.php/topic,48639.msg241764.html#msg241764

[CharlieBrady]

The reason why I have it setup this way is per recommendation from SME staff.

There are no staff.

I had asked the best method of setting up a transparent proxy and was advised on using 2 nics (1 for the outside and 1 for the inside) and to setup sme server as a Server - Gateway.  Is this not correct?

Correct. servergateway with 2 nics is the only way to work as a transparent proxy. You could use 'private server and gateway mode' and then set http and smtp services to access->private.

But then again, if you have no web applications installed, you are very unlikely to be vulnerable to any http attacks. You should be spending your time elsewhere - e.g. ridding your local network of Windows computers.

[Stefano]

if you need a transparent proxy you are right

[ghorst352]

There are no staff.

LOL.  I know there are no paid staff but I call the dev team and anybody else who works on SME as staff.  Staff would be defined by being payed depending on which wiki or dictionary you look at.  Or staff as a collective body working on a project or goal lets say........etc. etc.. 

if you need a transparent proxy you are right

I did not state that perhaps clearly beforehand so that's my mistake.