Re: Re: Introduction and first questions

["Mark Harrison \(Yahoo!\)" <mph@xxxxxxxxxxxxxxx>]

Keith,

The method I'm talking about does not require DIRECT ACCESS at all.

Access via a (forward) proxy is fine.

The problem I'm solving is that access is COMPLETELY blocked to
non-standard ports.

>From Kingfisher, for example, I only have access via proxy... and that
only
to ports 80 and 443. Access to ports like 81 and 82 isn't possible AT ALL,
whether by proxy or not. I have NO direct access out under any
circumstances.

However, proxy chaining is a bit of a black art. Some proxy servers are
better than others - without seeing what your office uses, I can't comment,
but I can confirm that I've used reverse proxies for corporate clients in
this way and those sites ARE accessable from other companies, even
companies
that themselves use (forward) proxies.

The most common failure mode in proxy chaining is when the person who set
up
the reverse proxy has included the ProxyPass directive, but missed out the
ProxyPassReverse one...

M.


----- Original Message -----
From: "Keith Doxey" <ukha@xxxxxxx>
To: <ukha_d@xxxxxxx>
Sent: Thursday, February 26, 2004 8:57 AM
Subject: RE: [ukha_d] Re: Introduction and first questions
> As you say, using your method only requires that Port 80 is allowed
through
> the companies firewall. What happens if there is NO DIRECT access to
Port
80
> or Port 445 and ALL INTERNET ACCESS is via Proxy servers ?
>
> At work we have NO direct access and sometimes we get very strange
things
> happening. For instance, if I type in "diyha.co.uk" my
website always
loads
> OK but using "www.diyha.co.uk" I sometimes get a compression
error that
> prompts me to save the file to disk. It only happens with a default
page
> becuase if I type "www.diyha.co.uk/index.html" it will load
OK.
>
> Its definately something to do with our Proxy servers and only ever
seems
to
> affect ".co.uk" domains ("kat5.tv" or
"www.kat5.tv" always work OK even
> though they are hosted on the same serveras diyha.co.uk).
>
> I also experience trouble with Internet banking from work. Sometimes
it is
> fine, other times I log in OK then go to do something and get thrown
back
to
> the login screen again, presumably due to hitting a different proxy.
>
> Do you thing that the Apache Reverse Proxy method would work OK under
the
> above conditions ?
>
> Using non standard ports isnt an option as they are also locked down.
>
> :-(
>
> Keith
>
>
>
>
> UK Home Automation Meet 2004 - BOOK NOW!
> http://www.ukha2004.com
>
> http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
> Yahoo! Groups Links
>
>
>
>
>
>
>



UK Home Automation Meet 2004 - BOOK NOW!
http://www.ukha2004.com

http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx