Raptor/Service Redirect/HTTP/Original IP address

From: Anders Buch (dont@write.me)
Date: 11/29/02 

From: "Anders Buch" <dont@write.me>
Date: Fri, 29 Nov 2002 16:13:37 +0100

Gentlemen,

I have a small challenge for which I hope you have any ideas on how to
solve.

We have a Symantec Raptor firewall 6.5.2 running on Windows NT.

On this box we have a "Redirect Service" which forwards all traffic from the
firewall's external IP address to a web server in the DMZ zone.

When doing so the web server is represented with the internal IP address of
the firewall instead of the clients original IP address.

This of course ruins our possibilities to do web statistics on the web
server as all traffic comes from the same IP address.

Any input/ideas on how to solve/change this?

- Anders

"Murphy's Computer Law 15: Program results should always be reproducible.
They should all fail in the same way."

Relevant Pages

  • Re: disconnect a hacker
    ... My Web server station is right next ... my attention divided by security concerns... ... see an IP connected to port 80, ... I've been forwarding my firewall logs to my ISP, ...
    (alt.computer.security)
  • Re: Firewall on server itself
    ... Perhaps the iptables could defend against an intruder who is already ... Firewall vender specific vulnerabilities ... >> be configured to protect the web server as well other computers on ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
    (Security-Basics)
  • Re: [fw-wiz] Using SSL accelerators in firewalls
    ... It also depends on what you're using your SSL for, and how tightly you can couple ... your firewall with your web application. ... web server don't have to be very aware of each other. ... >> lost in the process and the security of transactions eroded. ...
    (Firewall-Wizards)
  • Re: security advice (possible hacker activity?)
    ... > trojan or worm is installed onto the web server. ... > itself through the firewall to an email user on a PC, ... > the IIS web server. ... IWAM runs any site with Access or SQL. ...
    (microsoft.public.inetserver.iis.security)
  • Re: security advice (possible hacker activity?)
    ... > trojan or worm is installed onto the web server. ... > itself through the firewall to an email user on a PC, ... > the IIS web server. ... IWAM runs any site with Access or SQL. ...
    (microsoft.public.win2000.security)
Loading