Re: [WhatsUp Forum] Web access through a firewall

[Roger Hanson]

How about setting up a VPN from your machine on the internet to your firewall. Then, you're secure to your WUG server. Don't even open port 80 on the firewall.   Alternately, is it possible to set up SSL to make it a bit more secure?  I guess I've never thought to see if the WUG server could do SSL. ----- Original Message ----- From: Paul Jasa To: [EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 1:20 PM Subject: RE: [WhatsUp Forum] Web access through a firewall My personal opinion being security-minded:   First of all, I would use the option to run the web server on a VERY different port, like port 55355 or something like that.  Test it from the inside to make sure that works, that would be:   http://marks.whatsup.box:55355   Then, open your firewall to allow ONLY to the NAT (external) IP address ONLY on that port 55355.  You can test by opening your DOS window and doing a:   telnet marks.whatsup.box  55355   you should bet a blank response.   If you were really secure, you'd limit on the firewall what source IP people can come from, but that's just me.  pj ====================================== Paul Jasa  DATA PLUMBER ====================================== -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Mark Hunsaker Sent: Wednesday, February 25, 2004 01:26 PM To: '[EMAIL PROTECTED]' Subject: [WhatsUp Forum] Web access through a firewall Hello All,   I have set up my WUG 8.0 server and everything is running fine.  Monitoring, notifications etc... are all good and working properly.  Next step is to allow monitoring and access via the web from outside our network.  I have everything running what appears to be fine on the web side from inside the network.  I translated the address from and inside to outside address in the firewall and opened port 80 but I still can not access it from outside the network.  I have verified that the DNS entry from my ISP is valid and can ping the address and receive a response.  So - What have I overlooked, I just need a fresh pair of eyes so to speak.  Probably something so simple I will feel really dumb when everyone points it out to me.   Thanks for you assistance. Mark A. Hunsaker Systems Administrator Town of Flower Mound 972.874.6053 voice 972.874.6452 fax [EMAIL PROTECTED]   The information contained in this e-mail and any attached documents may be privileged, confidential and protected from disclosure. If you are not the intended recipient you may not read, copy, distribute or use this information. If you have received this communication in error, please notify the sender immediately by replying to this message and then delete it from your system.