Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: john on November 01, 2002, 05:09:52 AM

Title: webserver behind e-smith firewall
Post by: john on November 01, 2002, 05:09:52 AM

hi all.

I'm sure this question probably has a really simple answer, but i don't know it. :)

I am setting up an e-smith box as my gateway/firewall/router. But I want to set up a web server on a box behind the e-smith box.

How would I go about doing that? Is there anything special I need to do? Does the webserver behind the e-smith box need a static IP as well? (I have two to use.)

The actual web server is probably going to be a Mandrake box.

Any help here is much appreciated.

THanks,
john
spam-AT-jabster.net

(my reasons for this? I have a PPro-166 for the e-smith box, and a much faster Duron (900) I'm using as a CD/music player, which I want to double as a web server with outside access. i just dont think the ppro is fast enough.)

Title: Re: webserver behind e-smith firewall
Post by: Tony Z on November 01, 2002, 05:54:40 AM

Hi John,

You can just get the port forwarder rpm from myezserver.com contrib area and it will install a link in the service panel where you can forward the traffic to your internal web server.  Hope this helped.

Tony Z

Title: Re: webserver behind e-smith firewall
Post by: Andy MacDonald on November 01, 2002, 06:33:15 AM

I'd try the Ppro as the web server box. You may be quite surprised if it's just doing simple stuff.

Title: Re: webserver behind e-smith firewall
Post by: Darrell May on November 01, 2002, 09:50:28 AM

Use ProxyPass not Port Forwarding.

http://myezserver.com/downloads/mitel/contrib/ProxyPass/

Darrell

Title: Re: webserver behind e-smith firewall
Post by: Bill Talcott on November 01, 2002, 07:05:12 PM

Or use the 1:1 NAT HowTo and set up the SME to forward everything on the second IP to the other box. That would let you avoid the port issues with the services that are already running on the SME.

Title: Re: webserver behind e-smith firewall
Post by: Michael Smith on November 02, 2002, 01:21:02 AM

That Pentium Pro will most likely surprise the heck out of you, especially if you jam the box full of RAM.  That chip is 32-bit from the ground up and though its Windoze 9x performance isn't stellar, with a true 32-bit OS it will completely kick ass.  It has a decent chunk of cache and was designed for servers & what at the time were high-end workstations.  Give it a chance!

Title: Re: webserver behind e-smith firewall
Post by: john on November 02, 2002, 05:38:03 AM

well, I guess I'll try the P-pro first then. :)

I have at least 192M RAM for it, so I'll see how it works first.

thanks,
john

Title: Re: webserver behind e-smith firewall
Post by: shawn on November 03, 2002, 07:05:30 AM

I wouldn't use Mandrake as a firewall as you'll spend a quite a lot of time configuring it as a secure web server - mandrake (and any other full linux distro) installs quite a lot of stuff that you don't really need. Therefore I would use sme as a web server. It is much more secure than any custom installed distro (unless you're linux wiz :-)...) and it's easy to install. But the old p pro won't do good job. If I may suggest:
1 - P -pro: install ipcop linux distro: it's firewall/gateway stripped linux distro.
- install 3 NIC's in to it.
2 - Install sme server on AMD box and set it up to be on DMZ zone.
For support and help regarding ipcop and any other security related problems try:
http://ipcop.hopto.org