RE: [FW1] transparent proxy

[Elmar van Mourik <e.vanmourik@FW1-NOSPAMzhew.nl>]

It's better to put the proxy on the inside LAN instead of in the DMZ.
There's much less traffic going through your firewall in that situation.
In the rulebase you only have to allow http (and https) from the proxy to
the internet.

Elmar van Mourik
ZHEW System Management

> -----Oorspronkelijk bericht-----
> Van:	Ronneil Camara [SMTP:RonneilC@remingtonmicroshare.com]
> Verzonden:	maandag 19 maart 2001 5:50
> Aan:	'fw-1-mailinglist@lists.us.checkpoint.com'
> Onderwerp:	[FW1] transparent proxy
> 
> 
> I'm planning to put a proxy server in the DMZ.  What would be the rule so
> that internal users browsing the web at port 80 are redirected to the
> proxy
> in DMZ at port 8080 or any other port where the proxy listens to?
> 
> Thanks.
> 
>             .-------------------------------------------------------.
>     o^o     | Ronneil Camara     | ronneilc@remingtonltd.com        |
>     /V\     |--------------------| +|
>    // \\    | "The only way to   `----------------------------------|
>   /(   )\   |          stop a hacker is to think like one."         |
>    ^^-^^    |                          ...brilliant misguided youth |
>             `-------------------------------------------------------'
> 
> 
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======
> 
------------------------------ 
Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde(n). Indien de
e-mail bij vergissing bij u terecht is gekomen, wilt u ons dan berichten via
postmaster@zhew.nl? Wij verzoeken u in dit geval de e-mail te vernietigen,
de inhoud ervan niet te gebruiken en niet onder derden te verspreiden, omdat
het bericht vertrouwelijke informatie kan bevatten. Aan dit bericht kunnen
geen rechten worden ontleend inzake contractuele of wettelijke
verplichtingen. Een opdracht of beschikking wordt alleen per post verzonden
en ondertekend door daartoe bevoegd(e) perso(o)nen. 

This e-mail message is intended exclusively for the addressee. If the e-mail
was sent to you by mistake, would you please contact us at
postmaster@zhew.nl? In that case, we also request you to destroy the e-mail
and to neither use the contents or disclose them in any manner to third
parties, because the message can contain confidential information. This
message can not lead to any contractual or legal obligation. ZHEW only order
products and send official decisions on their official (hard copy) documents
that are signed by authorised personnel only. 

Zuiveringsschap Hollandse Eilanden en Waarden, Dordrecht 
tel: +31 (0)78 6397100 
fax: +31 (0)78 6311871 
web: http://www.zhew.nl


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================