You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Buck, Robert" <rb...@verisign.com> on 2008/10/14 18:24:55 UTC

[users@httpd] How to proxy http from a secured site via a reverse-tunnel?

I am a newbie at this and so I am not quite sure how to ask this
question. But here goes...
 
Two networks exist: engineering and corporate. The engineering network
is firewalled so that NO traffic can go out; these computers cannot
connect to the internet. The corporate network is firewalled but those
computers may connect to the internet, and they may connect to computers
on the engineering network by using an SSH tunnel (more than often
through PuTTY).
 
internet <---- corporate ----> engineering
 
On the engineering network there exists a engineering linux machine that
I want to temporarily provide internet access to so that I can update
the OS. This is the goal.
 
Is it possible to setup a apache server to act as a web proxy for
computers on the engineering network? Would a reverse tunnel need to be
set up from the corporate machine to the engineering machine?
 
How would I make this work?
 
I already got so far as to prove that I can proxy corporate-network
computers through the mod_proxy enabled apache server via:
 
<IfModule proxy_module>
  ProxyRequests On
  <Proxy *>
    Order deny,allow
    Allow from all
  </Proxy>
  ProxyVia On
</IfModule>
 
But I cannot quite figure out how to get the engineering computer to use
a reverse-tunnel as the proxy.
 
I could be going about this all wrong too I suppose.
 
Thanks,
 
/b

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] How to proxy http from a secured site via a reverse-tunnel?

Posted by Davide Bianchi <da...@onlyforfun.net>.
Buck, Robert wrote:
> Two networks exist: engineering and corporate. The engineering network
> is firewalled so that NO traffic can go out

> On the engineering network there exists a engineering linux machine that
> I want to temporarily provide internet access to so that I can update
> the OS. This is the goal.
>  
> Is it possible to setup a apache server to act as a web proxy for
> computers on the engineering network?

No. You'll have to talk with your IT department and have an hole poked
in the firewall so your machine can talk with the internet.

Davide

-- 
Can i dial 1-255-255-255255 and make every phone in the world ring?
-- Tanuki

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


[users@httpd] How to proxy http from a secured site via a reverse-tunnel?

Posted by "Buck, Robert" <rb...@verisign.com>.
Clarification to question:

internet <---- corporate ----> engineering

internet <---- mod_proxy --<-- reverse-proxy-initiated-from-corporate



-----Original Message-----
From: Buck, Robert [mailto:rbuck@verisign.com] 
Sent: Tuesday, October 14, 2008 12:25 PM
To: users@httpd.apache.org
Subject: [users@httpd] How to proxy http from a secured site via a
reverse-tunnel?

I am a newbie at this and so I am not quite sure how to ask this
question. But here goes...
 
Two networks exist: engineering and corporate. The engineering network
is firewalled so that NO traffic can go out; these computers cannot
connect to the internet. The corporate network is firewalled but those
computers may connect to the internet, and they may connect to computers
on the engineering network by using an SSH tunnel (more than often
through PuTTY).
 
internet <---- corporate ----> engineering
 
On the engineering network there exists a engineering linux machine that
I want to temporarily provide internet access to so that I can update
the OS. This is the goal.
 
Is it possible to setup a apache server to act as a web proxy for
computers on the engineering network? Would a reverse tunnel need to be
set up from the corporate machine to the engineering machine?
 
How would I make this work?
 
I already got so far as to prove that I can proxy corporate-network
computers through the mod_proxy enabled apache server via:
 
<IfModule proxy_module>
  ProxyRequests On
  <Proxy *>
    Order deny,allow
    Allow from all
  </Proxy>
  ProxyVia On
</IfModule>
 
But I cannot quite figure out how to get the engineering computer to use
a reverse-tunnel as the proxy.
 
I could be going about this all wrong too I suppose.
 
Thanks,
 
/b

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org