[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] HTTP, HTTPS, and FW-1
In practice, it is best to allow HTTP also to your domain and then use a redirector to use HTTPS page. People who may still have a valid HTTP link will be redirected to the new URL. I would recommend reducing the standard 5 second wait. This is annoying also to users who frequently visit the URL. Company employees can become annoyed quickly over the "S" in HTTPS. -----Original Message----- From: Luis Aguilera [mailto:[email protected]] Sent: Tuesday, April 23, 2002 9:51 AM To: [email protected] Subject: [FW-1] HTTP, HTTPS, and FW-1 Hello everyone, have an esoteric question. We have an apache webserver. This server has been accessible to the world with http. I recently acquired an ssl certificate and I'm now forcing all traffic to use https. To do this, I simply changed the FW rule to accept traffic only from the https service. It all works fine, except for one thing. If you go to the url https://hostname.ourcompany.com it works great. However, if you go to http://hostname.ourcompany.com you will eventually get a "page cannot be displayed... cannot find server or DNS error". The FW logs correctly show the http packet being dropped. Now, I've done a little research and found that error 403-4.htm (in IE) instructs the user to enter httpS://... as the url. Does any now how I can get FW-1 to respond back with a specific html error? thanks Luis Aguilera IT Manager BaseSix ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|