Hi,
I was wondering if someone could help me with setting up https
proxying with zorp. I would like zorp to be able to proxy based on
domain name, as I have a limited number of external IPs. I figured I
could set up unlimited https servers on internalRFC1918 addresses and
have zorp reverse proxy them.
https foo1.com(10.1.1.1) -> 192.168.1.5
https foo2.com(10.1.1.1) -> 192.168.1.6
https foo3.com(10.1.1.1) -> 192.168.1.7
Does this make sense?
I am still trying to get a handle on zorp's configuration files, so if
you could include some examples, I would be very grateful.
TIA!
:^P
--
Peter Hicks
GnuPG public key: http://jah.net/~petong/public_key.txt
Key Fingerprint: 4E24 3C78 A165 537C 729C 8D25 3547 3CE9 9E7D 42B6
Truth suffers from too much analysis.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi!
Could Zorp work as "real" transparent proxy, so neither client nor
server will see its IP address? I need this for per ip bandwidth
limiting. This example ilustrate this:
client1 ----- zorp_transparent_firewall ----- internet ----- server
client2
..
clientn
Clients have _public_ IPs.
Is this possible:
When client connects to server, zorp intercept that connection, does
protocol analysis etc., and then connents to server as _client_ IP. So,
server sees in its log, that connection was made by client, not Zorp
machine.
If Zorp could do this, I could set per ip bandwitdh limiting (cbq rules)
on both firewall interfaces, not only on internal NIC. Therefore
outgoing traffic would be shaped too.
- --
c0g(a)wp.pl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQE+iCWLPqmVt5WhbA8RAmADAJ0UdLDd7epAp0p5A8m4Jm7phOUXWACeKwva
k7sDDpPqozPAww6vqoMyW7w=
=QRJL
-----END PGP SIGNATURE-----