Smoothwall - Reverse Proxy?

[Steve21]

Afternoon Guys,

 

Just looking at finally sorting our firewall out and wanted to check with anyone running Smoothwall does it definitely allow for reverse proxy? As it seems depending who I talk to some say yes other's say no.

 

So for example, multiple URLs can be to different servers etc etc

 

Thanks,

Steve

[john]

It always used to have an optional module for Reverse Proxy so buy that and get it on and boom off you go Don't know if it now comes in the box but it certainly was an option previously.

[Steve21]

That's great thank you Guessing it would be built-in now then from some convo's I've had, guess we will find out haha

 

Thanks,

Steve

[Cache]

It allows it, but we couldn't use it because we are nat'd behind the RBC.

[Steve21]

Doesn't that still work then?

 

As we're behind SWGFL NAT, but then we NAT ourselves as they didn't give us enough IPs etc.

 

Steve

[Cache]

I was told that Smoothwall needs a public IP address for it to be able to work as a reverse proxy. If the traffic goes through a NAT first then the reverse proxy won't work. That may be specifically down to the way our RBC does it, I don't know. We have a public IP which goes through their Web Gateway and then forwarded on to our server. I spent a bit of time trying to make it work before support told me it wouldn't, just means I ended up with 3 public IP's pointing to different internal servers instead of the single one which I wanted. Edited July 30, 2015 by Cache

[Steve21]

I was told that Smoothwall needs a public IP address for it to be able to work as a reverse proxy. If the traffic goes through a NAT first then the reverse proxy won't work. That may be specifically down to the way our RBC does it, I don't know. We have a public IP which goes through their Web Gateway and then forwarded on to our server. I spent a bit of time trying to make it work before support told me it wouldn't, just means I ended up with 3 public IP's pointing to different internal servers instead of the single one which I wanted.

 

Interesting :s Will have to check that with them, as we have so many external things we don't have enough IPs haha

 

Thanks,

Steve

[Cache]

Been and double checked the case notes, this was the explanation:

 

For reverse proxy to work, the smoothwall's external ip address needs to match the host name - this is possibly why it is not working

 

You could probably set up port forward, but your LEA would also need to set up a port forward to point at the smoothwall

 

Good luck!