> I wonder if someone have had any experience connecting from insida a
> firewall to a outside server, and what requirments/steps was needed. I'm
> trying to do this on a NT 4 server connection via firewall to another NT
> server. Any pointers, comments or snippets of code would be much
> appriceated.

We do this, using a HTTP proxy that supports the CONNECT method.
You connect to it, and send (in clear) a line (terminated with CRLF) like:

CONNECT host.domain:443 HTTP/1.0

and a blank line, then read back the proxy header up to a blank line,
check whether you got connected, then proceed to start SSL. Once the
proxy connects you, it can't read or interfere with the communication in
any way without breaking it, so it has no way of enforcing that you use
HTTP over the SSL connection - any protocol works.

Note that many CONNECT proxies will restrict the target port to 443, the
https port. In some cases, this has meant we've had to allocate a second
IP address on the server machine because it was running a secure web
server *and* an SSL-based application.

That's the easiest way, but you could also use the low-level SOCKS
protocol for sites without this support (we do this too).

-- 
Clifford Heath                    http://www.osa.com.au/~cjh
Open Software Associates Limited       mailto:[EMAIL PROTECTED]
29 Ringwood Street / PO Box 4414       Phone  +613 9871 1694
Ringwood VIC 3134      AUSTRALIA       Fax    +613 9871 1711
------------------------------------------------------------
Deploy Applications across the net, see http://www.osa.com


+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to