ASPNET in DMZ - PLEASE HELP

[Bill Carpenter]

I would like to set up a ASPNET application like this:
I want a box that serves as a webserver outside the firewall, this box
would forward requests to a ASPNET application inside the firewall
through port 80 only, similar to how websphere and apache work together.
I can do redirects but I do not want the actual address to change from
the address the browser initially hits outside the firewall. Does
anyone know how to do this? Thanks for any help.

[Alec MacLean]

Bill,

I think the internal server will need to be visible to some extent to the
outside.

Why not just have the internal server and use router/firewall
port-forwarding to relay the port 80/443 http/ssl traffic? You wouldn't
need an external webserver in the DMZ at all then. (This is the technique I
use.)

Alternatively, try using a frameset on the external server that has only one
frame and the source set to the start address and page of the internal
server app. You'll still need to expose the internal server to the internet
via port forwarding in order to reference it on the DMZ box, so this won't
protect you from automated attacks (if this is what you are trying to
prevent).

--
Alec MacLean

"Bill Carpenter" <bi************@freeborders.com> wrote in message
news:uy*************@TK2MSFTNGP12.phx.gbl...

I would like to set up a ASPNET application like this:
I want a box that serves as a webserver outside the firewall, this box
would forward requests to a ASPNET application inside the firewall
through port 80 only, similar to how websphere and apache work together.
I can do redirects but I do not want the actual address to change from
the address the browser initially hits outside the firewall. Does
anyone know how to do this? Thanks for any help.

[Christopher Reed]

You probably want to look at using a webservice that will do the bulk of the
work inside the firewall.

A Question: Why can you not run the ASP.NET application on the box outside
the firewall. Also, since you mention "DMZ", that implies that you actually
have two firewalls with the DMZ in between.

Just a thought!

Christopher Reed
Web Applications Supervisor
City of Lubbock

Bill Carpenter<bi************@freeborders.com> 8:29:53 AM 4/21/2004 >>>

I would like to set up a ASPNET application like this:
I want a box that serves as a webserver outside the firewall, this box
would forward requests to a ASPNET application inside the firewall
through port 80 only, similar to how websphere and apache work together.
I can do redirects but I do not want the actual address to change from
the address the browser initially hits outside the firewall. Does
anyone know how to do this? Thanks for any help.