On Tue, 8 Sep 1998, Gary E. Bickford wrote:

> >Also, a SSL type server is really needed to make the tool trustworthly, if
> >it is used from remote sites -- which is pretty important.
> 
> If one has IP addresses or ports available (even only on localhost), one
> can run a separate instance of Apache - for instance port 443 (SSL) on a

Port and IP addresses I have - CPU power I don't, I don't want to run
another copy of Apache.

> certain IP.  I'd prefer a web server whose security is well known, rather
> than an ad hoc one.  I've been pretty happy forwarding port X via SSH from

This I agree with, which is why I've been looking for a mini-web server to
be trusted.

> my workstation to the server, and having a web server config tool that runs
> on a web server instance that is only available on Port X on localhost.
> (This doesn't happen to be an Apache thing, but the method applies)  Then I
> run Netscape on my workstation, e.g., http://workstationIP:portX/.  This is
> forwarded by SSH to the remote server.  By using SSH, I don't even have to
> worry about firewalls in between (once it got set up)

I use SSH and have been looking into this kind of solution also.

> the machine.  Of course, I'd be circumspect about changing the
> configuration for the maintenance instance!!

I could see creating a mimimum configuration of Apache for this -- which
is what Stronghold does -- BUT I have enug trouble keeping my Apache
binaries current and still have the CPU load issue.

Using SSH and a mini-httpd in perl running off of inetd (I suppose the
maint Apache could do that too, duh <g>) would give a trusted and
reliable-euf for maint commands server.

Later ...

Rich Roth --- On-the-Net

Direct:  Box 927, Northampton, MA 01061, Voice: 413-586-9668

Email: [EMAIL PROTECTED]                     Url: http://www.on-the-net.com
   ~~~   www.i-depth.com lets you Add Instant Depth to your Website    ~~~
     ~~~  Adding depths to Web presences and Internet providers  ~~~~~

Reply via email to