ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Need Suggestion

    Scheduled Pinned Locked Moved IT Discussion
    20 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • thwrT
      thwr @sreekumarpg
      last edited by thwr

      @sreekumarpg said in Need Suggestion:

      @scottalanmiller , @JaredBusch @thwr
      Thanks for the support. I will be testing the Ngnix.

      Proposed requirement diagram

      0_1486128046479_1.png

      There are multiple possible approaches, for example:

      • Address based: Block every access using a local firewall on your webserver that does not come from your proxy
      • Header based: Insert a special header field on your proxy and check that header on your webserver. Reject access in case the header does not exist

      PS: Upvote for providing sufficient information AND a diagram. Makes helping you so much easier.

      JaredBuschJ 1 Reply Last reply Reply Quote 3
      • scottalanmillerS
        scottalanmiller
        last edited by

        What is your goal in that diagram?

        JaredBuschJ 1 Reply Last reply Reply Quote 0
        • JaredBuschJ
          JaredBusch @scottalanmiller
          last edited by

          @scottalanmiller said in Need Suggestion:

          What is your goal in that diagram?

          Showing that it is a LAN device that he wants to use the proxy.

          DashrenderD 1 Reply Last reply Reply Quote 0
          • JaredBuschJ
            JaredBusch @thwr
            last edited by

            @thwr said in Need Suggestion:

            PS: Upvote for providing sufficient information AND a diagram. Makes helping you so much easier.

            I am so not used to clear questions

            1 Reply Last reply Reply Quote 2
            • DashrenderD
              Dashrender @JaredBusch
              last edited by

              @JaredBusch said in Need Suggestion:

              @scottalanmiller said in Need Suggestion:

              What is your goal in that diagram?

              Showing that it is a LAN device that he wants to use the proxy.

              So are DMZs just not a thing anymore?

              I'm curious what the proxy provides in this case?

              JaredBuschJ 1 Reply Last reply Reply Quote 0
              • JaredBuschJ
                JaredBusch @sreekumarpg
                last edited by

                @sreekumarpg said in Need Suggestion:

                @scottalanmiller , @JaredBusch @thwr
                Thanks for the support. I will be testing the Ngnix.

                Proposed requirement diagram

                0_1486128046479_1.png

                You will have to make sure that your DNS in house gets updated so that

                app.domain.com points to the proxy server instead of app server.

                One would assume the following:
                Web Server: 10.1.1.2
                App URL: app1.domain.com
                Internal DNS result for URL returns 10.1.1.2
                Firewall port forward is to 10.1.1.2
                External DNS resolves app1.domain.com to your WAN IP.

                You will implement the proxy and give it 10.1.1.3
                Update your internal DNS for app1.domain.com to point to 10.1.1.3
                Change your firewall to port forward to 10.1.13
                Do not change your External DNS.

                1 Reply Last reply Reply Quote 0
                • JaredBuschJ
                  JaredBusch @Dashrender
                  last edited by

                  @Dashrender said in Need Suggestion:

                  @JaredBusch said in Need Suggestion:

                  @scottalanmiller said in Need Suggestion:

                  What is your goal in that diagram?

                  Showing that it is a LAN device that he wants to use the proxy.

                  So are DMZs just not a thing anymore?

                  I'm curious what the proxy provides in this case?

                  DMZ is a lazy answer, and should never be used.

                  DashrenderD scottalanmillerS 2 Replies Last reply Reply Quote 1
                  • DashrenderD
                    Dashrender @JaredBusch
                    last edited by

                    @JaredBusch said in Need Suggestion:

                    @Dashrender said in Need Suggestion:

                    @JaredBusch said in Need Suggestion:

                    @scottalanmiller said in Need Suggestion:

                    What is your goal in that diagram?

                    Showing that it is a LAN device that he wants to use the proxy.

                    So are DMZs just not a thing anymore?

                    I'm curious what the proxy provides in this case?

                    DMZ is a lazy answer, and should never be used.

                    huh - more explanation on that would be great.

                    But just having the DMZ doesn't mean that @thwr's suggestion of blocking access via a firewall on the webserver shouldn't be used.

                    JaredBuschJ 1 Reply Last reply Reply Quote 0
                    • JaredBuschJ
                      JaredBusch @Dashrender
                      last edited by JaredBusch

                      @Dashrender said in Need Suggestion:

                      @JaredBusch said in Need Suggestion:

                      @Dashrender said in Need Suggestion:

                      @JaredBusch said in Need Suggestion:

                      @scottalanmiller said in Need Suggestion:

                      What is your goal in that diagram?

                      Showing that it is a LAN device that he wants to use the proxy.

                      So are DMZs just not a thing anymore?

                      I'm curious what the proxy provides in this case?

                      DMZ is a lazy answer, and should never be used.

                      huh - more explanation on that would be great.

                      But just having the DMZ doesn't mean that @thwr's suggestion of blocking access via a firewall on the webserver shouldn't be used.

                      A DMZ is just dumping everything to a system/subnet. Using a proxy lets you selectively forward on what you want. A proxy gives you a single place to defend and manage, instead of every system on the DMZ subnet.

                      DashrenderD 1 Reply Last reply Reply Quote 0
                      • JaredBuschJ
                        JaredBusch
                        last edited by

                        split the DMZ stuff to a new thread.

                        1 Reply Last reply Reply Quote 0
                        • JaredBuschJ
                          JaredBusch @scottalanmiller
                          last edited by

                          @scottalanmiller said in Need Suggestion:

                          @sreekumarpg said in Need Suggestion:

                          The development team requirement is that if they want to connect to the web server then they need the proxy setting in the client machine.

                          If the client machine is not configured with proxy setting , then they can browse all other site expect the web server. if they configure the proxy setting in client machine they should reach the server. This is their exact requirement to test their application is working fine if a proxy is configure.

                          That's totally different to what you are doing here.

                          Yeah, this is totally different. This is an inline proxy/webfilter design.

                          1 Reply Last reply Reply Quote 1
                          • art_of_shredA
                            art_of_shred
                            last edited by

                            Temporarily locking this topic in order to split the thread.

                            1 Reply Last reply Reply Quote 0
                            • art_of_shredA
                              art_of_shred
                              last edited by

                              Topic unlocked. To continue discussing DMZ, please go to:

                              https://mangolassi.it/topic/12427/proper-dmz-configuration-and-use

                              1 Reply Last reply Reply Quote 1
                              • sreekumarpgS
                                sreekumarpg
                                last edited by

                                Thanks All

                                I will be installing Nginx and will do as per @Dashrender suggestion

                                1 Reply Last reply Reply Quote 0
                                • 1 / 1
                                • First post
                                  Last post