[wellylug] Apache as a proxy for Outpuke's web-interface

Michael Dittmer (An Inside Job) michael at inside-job.co.nz
Tue May 17 18:08:16 NZST 2005


Hi Andrej

Technically your MCSE is correct is wanting following standard MS procedure,
however I have never taken that approach myself due to your concern stated
below.

If you want to run SSL (which is a good idea), then you could use a solution
I put in place for a client. I have a SME Server 6.0.1 box in a DMZ that
forwards email to the internal Exchange server. What the SME box does is
scans for viruses and spam and also provides a SSL secured webmail frontend
to the Exchange e-mail boxes by talking IMAP.

The SME box uses Horde,IMP and SSL running on Apache to deliver the
web-interface to the external client machines. It then backends to the
Exchange box using IMAP. I could have used SSL from the SME box to the
Exchange box, but didn't at the time.

Hope this helps. Sorry I didn't mention this in my last message, but I had
forgotten about it at the time.

Regards

Michael


-----Original Message-----
From: wellylug-admin at lists.wellylug.org.nz
[mailto:wellylug-admin at lists.wellylug.org.nz] On Behalf Of
andrej at paradise.net.nz
Sent: Tuesday, 17 May 2005 4:09 p.m.
To: wellylug at lists.wellylug.org.nz
Subject: RE: [wellylug] Apache as a proxy for Outpuke's web-interface

Quoting "Michael Dittmer (An Inside Job)" <michael at inside-job.co.nz>:

> Hi Andrej

 
> What you can do and is recommended by Microsoft is to have the 
> Exchange
> 2003 box sitting on your protected-local network and have a Windows 
> Server
> 2003 or Windows Server 2003 (Web-Edition) sitting in the DMZ.
Heh - surprise me!

That's what our MCSE wants to do, too ;)

However, I'd much prefer not to have two machines with the same underlying
OS (and the same potential
exploits) daisy-chained to each other.


And why pay an extra 1000$ if I can get the same results (with extra safety)
for free... 


Cheers,
Andrej


--
Wellington Linux Users Group Mailing List: wellylug at lists.wellylug.org.nz To
Leave:  http://lists.wellylug.org.nz/mailman/listinfo/wellylug






More information about the wellylug mailing list