/ Zope / Apsis / Pound Mailing List / Archive / 2006 / 2006-12 / Pound Proxy and the Firewall problems:

[ << ] [ >> ]

[ Alive URI / Francisco Ruiz ... ] [ RewriteLocation / "Joe Gooch" ... ]

Pound Proxy and the Firewall problems:
"Gray, Tom A [EQ]" <Tom.Gray(at)embarq.com>
2006-12-20 19:41:42 [ FULL ]
I am using Pound to proxy request from the Extranet DMZ into the Enterprise.   
  It's not working because gateway firewall blocks the request as soon as the
destination information shows up in the URL.   How can I get pound to keep the
requesting URL while serving the content from the backend?    Here is my
current config file:

ListenHTTP
    Address 144.226.50.99
    Port    8608 
    RewriteLocation 0 
    RewriteDestination 0
    Service
    	Backend
    		Redirect "http://tmonline.corp.intranet/67276/index.htm"
    	End
    End
End

To phase the question another way, if, instead, I tried it like this (see below
config), pound does contact the backend while keeping the requesting URL
header, but, it never finds the content at:    67276/index.htm   

ListenHTTP
    Address 144.226.50.99
    Port    8608 
    RewriteLocation 0 
    RewriteDestination 0
    Service    		
    	BackEnd
            	Address tmonline.corp.intranet
            	Port 80
         	End
    End
End
Attachments:  
text.html text/html 3187 Bytes

Re: [Pound Mailing List] Pound Proxy and the Firewall problems:
Adam <adam(at)host8.biz>
2006-12-20 20:11:22 [ FULL ]
> ListenHTTP[...]

you are using only redirect here and it is not proxy in fact,
redirect is useful when you need some simple filtering
without using any backend, for example to block unwanted
hack attempts in URLs:

  Service
   Url         "\?.*(iframe|script|document\.cookie|alert|\;).*"
   Redirect    "http://host8.biz/errors/forbidden-url.htm"
  End

but you don't need "Redirect" in "Backend" context since it
doesn't make any sense
[...]


try with:

RewriteLocation 2
or
RewriteLocation 1 (default)


--
Kind Regards,
Adam Andrzej Jaworski
Host8Biz EU

RE: [Pound Mailing List] Pound Proxy and the Firewall problems:
"Gray, Tom A [EQ]" <Tom.Gray(at)embarq.com>
2006-12-20 20:47:46 [ FULL ]
When I use the backend like so:

	BackEnd
            	Address tmonline.corp.intranet
             	Port 80
          	End

Then the request never arrives at the content location of 
tmonline.corp.intranet/67276/index.htm

What is the trick?

Secondly -- In fact, the gateway firewall will block a request to
tmonline.corp.intranet, so I need Pound to retain the requesting URL base
(partners.xyx.com).     How to?   



-----Original Message-----
From: Adam Andrzej Jaworski [mailto:emaylx(at)gmail.com] On Behalf Of Adam
Sent: Wednesday, December 20, 2006 1:11 PM
To: pound(at)apsis.ch
Subject: Re: [Pound Mailing List] Pound Proxy and the Firewall problems:
[...]

you are using only redirect here and it is not proxy in fact, redirect is
useful when you need some simple filtering without using any backend, for
example to block unwanted hack attempts in URLs:

  Service
   Url         "\?.*(iframe|script|document\.cookie|alert|\;).*"
   Redirect    "http://host8.biz/errors/forbidden-url.htm"
  End

but you don't need "Redirect" in "Backend" context since it doesn't make any
sense
[...]


try with:

RewriteLocation 2
or
RewriteLocation 1 (default)


--
Kind Regards,
Adam Andrzej Jaworski
Host8Biz EU



--
To unsubscribe send an email with subject 'unsubscribe' to pound(at)apsis.ch.
Please contact roseg(at)apsis.ch for questions.
http://www.apsis.ch/pound/pound_list/archive/2006/2006-12/1166640102000/1166641882000

MailBoxer