DNAT is not any less secure than a reverse proxy..if you have your machine patched correctly and the webserver correctly configured then you will be fine..since it is only port 80 and 443 are the only ports required for a webserver..the rest can be left blocked at hte firewall.....if the machine gets owned in a properly setup DNAt it is either an admin config problem or a software vulnerability..
Hi, there is one fine difference between DNAT and reverse proxy so if i am right : -dnat gets the packet as is and puts it to the target only the header is modified. -a reverse-proxy generates a new, clean and right packet with the same content as before
security is not the only thing i need. i have different servers with different ports (other then 80 and 443) behind the firewall. i need to access the servers over
Hi there guys, plz come down and let me try to straighten things up a little bit.
There is no decision made yet, what future versions ASL will or wont support. There is a decision made which features we will add to ASL V5.
Prior designing the ASL V5, we created a feature poll where we invited various partners and customers to vote their most wanted features. They had around 100 differrent features to vote from. We also took your feature requests from the UBB into play.
Finally the 3 most wanted features were: 1. HTTP-Virus Scanning 2. Internet Uplink failover 3. Intrusion Prevention
HTTP/S reverse proxy functionality was at position 29. We see your demand for this feature, but we also have many requirements from other partners and customers.
As we have a very thight timeframe to design, implement and test ASL V5, we focused on the most wanted features. There was/is no time left to add any new features to ASL V5 anymore, right now we are testing, bugfixing and tuning the performance on ASL V5.
I hope this answers your question, if not, fell free to ask.
[ QUOTE ] security is not the only thing i need. i have different servers with different ports (other then 80 and 443) behind the firewall. i need to access the servers over
I think that's the answer best given. You knew it was desired but was not as desired as other things wanted by paying customers. Thanks for the answer, Gert. I'd still like to see it though.
I think that's the answer best given. You knew it was desired but was not as desired as other things wanted by paying customers. Thanks for the answer, Gert. I'd still like to see it though.
