It is actually to provide people https access as usual. However - if
require - be able to setup a SSL_Based OpenVPN or SSH-Tunnel through port
443 in case it's required. For HTTPS and SSH there is already a solution.
Working smooth - however it requires a daemon running on the firewall
server I would like not to run in.
So the trick is simple - depending on what connection type comes in -
forward the traffic to either IP. The Perl-script I have actually opens 2
network sockets - one to a Web-Server, the other to the SSH-Server.
Depending on the type of connection - it will forward to one or the other
server. However - I'll have a waiting period of up to 2 seconds - to have
the connection setup - as the system first awaits the response of the
remote SSH-Server if it exists. If not, then open the connection to the
HTTPS Server.

I thought it might be possible to do that using the packet-filters and
checking for some specifics in the connections data to decide upon were to
send the requested connection to.
It would be great to have such a feature - would ease many setups, and
give us poor travelers the possility to do back-homing in case companys
limit their entire network infrastructure etc. to their secure policies
...

Was just a try ;) I'm used to get things working under Linux. That's why I
ask these questions. And if it's Important enough for me - I try to
implement. But my knowledge is limited to bash/perl/php...

Cheers
Joerg

-- 
------------------------------------------------------------------------
| Joerg Mertin              :  [EMAIL PROTECTED]                (Home)|
| in Forchheim/Germany      :  [EMAIL PROTECTED]                  (Alt1)|
| Stardust's LiNUX System   :                                          |
| Web: http://www.solsys.org                                           |
------------------------------------------------------------------------
PGP Fingerprint: AF0F FB75 997B 025F 4538 5AD6 9888 5D97 170B 8B7A



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to