[plug] Firewall

[Adam Davin]

John,

not sure if this is what you are getting at but here goes.

To allow apache to accept and differentiate between name resolutions 
(terminology?) on the same IP address you need to use the virtual hosts 
settings (www.apache.org)

this basically entails setting up a virtual server for each name that you 
wish to use

at the top of your virtual hosts

stick
NameVirtualHost <IP>

<VirtualHost <IP>>
server blah
</VirtualHost>
...
...

The apache documentation does say that you can use * instead of your IP 
however I found that this didn't do what it was meant to and so used sed to 
replace a string of xxx.xxx.xxx.xxx in my httpd.conf on connection (using 
ip-up.local)

cat /etc/ppp/httpd.conf.tmp | sed s/xxx.xxx.xxx.xxx/$4/g > 
/etc/apache/httpd.conf
($4 should be your IP assigned by your isp)

HTH

Adam Davin
-----Original Message-----
From:	John Breen [SMTP:locutus at borg.apana.org.au]
Sent:	Monday, 30 July 2001 9:30 AM
To:	plug at plug.linux.org.au
Subject:	[plug] Firewall

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Guys,

Apologies if this is off-topic but...

I've just set up my firewall at home, using a linux distro called
Smoothwall.  It's quick and easy to set up - took me only 20 minutes
- - no kernel compiles, etc...

Anyway, the default behaviour of this firewall is to deny all packets
that ORIGINATE in the outside world, but let replies from packets
from behind the firewall in.  A little tweaking (about 40 seconds)
and I had set up a forward to my web server on port 80.

Now, the problem is, I have two names for my machine which both point
to the same IP.  One is for the main web page, and one is for my
private web page.  Unfortunately, the way the firewall is set up, ALL
requests to my web server go the main page, which obviously I don't
want.

Anyone have any ideas how to work around this?  I can provide my
firewall rules, if necessary.

Thanks in advance.

John Breen.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO2S4fXkzVr6mO4cbEQJf2gCg6lWDKto2szdyAWsi8AdbYN/mV7gAn2MZ
WILelFu6H3WJYKabjwZ5F55X
=4XyP
-----END PGP SIGNATURE-----

 << File: ATT00003.html >>