Topic: webserver behind e-smith firewall

[john]

hi all.

I'm sure this question probably has a really simple answer, but i don't know it.

I am setting up an e-smith box as my gateway/firewall/router. But I want to set up a web server on a box behind the e-smith box.

How would I go about doing that? Is there anything special I need to do? Does the webserver behind the e-smith box need a static IP as well? (I have two to use.)

The actual web server is probably going to be a Mandrake box.

Any help here is much appreciated.

THanks,
john
spam-AT-jabster.net

(my reasons for this? I have a PPro-166 for the e-smith box, and a much faster Duron (900) I'm using as a CD/music player, which I want to double as a web server with outside access. i just dont think the ppro is fast enough.)

[Tony Z]

Hi John,

You can just get the port forwarder rpm from myezserver.com contrib area and it will install a link in the service panel where you can forward the traffic to your internal web server.  Hope this helped.

Tony Z

[Andy MacDonald]

I'd try the Ppro as the web server box. You may be quite surprised if it's just doing simple stuff.

[Darrell May]

Use ProxyPass not Port Forwarding.

http://myezserver.com/downloads/mitel/contrib/ProxyPass/

Darrell

[Bill Talcott]

Or use the 1:1 NAT HowTo and set up the SME to forward everything on the second IP to the other box. That would let you avoid the port issues with the services that are already running on the SME.

[Michael Smith]

That Pentium Pro will most likely surprise the heck out of you, especially if you jam the box full of RAM.  That chip is 32-bit from the ground up and though its Windoze 9x performance isn't stellar, with a true 32-bit OS it will completely kick ass.  It has a decent chunk of cache and was designed for servers & what at the time were high-end workstations.  Give it a chance!

[john]

well, I guess I'll try the P-pro first then.

I have at least 192M RAM for it, so I'll see how it works first.

thanks,
john

[shawn]

I wouldn't use Mandrake as a firewall as you'll spend a quite a lot of time configuring it as a secure web server - mandrake (and any other full linux distro) installs quite a lot of stuff that you don't really need. Therefore I would use sme as a web server. It is much more secure than any custom installed distro (unless you're linux wiz ...) and it's easy to install. But the old p pro won't do good job. If I may suggest:
1 - P -pro: install ipcop linux distro: it's firewall/gateway stripped linux distro.
- install 3 NIC's in to it.
2 - Install sme server on AMD box and set it up to be on DMZ zone.
For support and help regarding ipcop and any other security related problems try:
http://ipcop.hopto.org