Page 1 of 2 12 LastLast
Results 1 to 10 of 19
  1. #1
    Untangle Ninja
    WebFooL's Avatar
    Join Date
    Jan 2009
    Location
    Sweden (Eskilstuna)
    Posts
    5,279

    Lightbulb Featur request Reverse proxy

    Hi,

    First let me say thanks to all Untangle Staff for this greate product.

    Last week i configured my Lab box with Apaches reverse proxy.
    Just to solv my Adito problem.
    I proxy http://untangleip/adito to my local Adito server.
    The same way can be done with Exchange.
    So http://utnangleip/exchange proxys to exchange frontend.
    Exchange needs a bit more than one proxy to work.
    read more here:http://www.wlug.org.nz/ApacheReverseProxy

    If the greate dev team could create a simple gui for the Reverse proxy and maby have some standard templates i think it can be a winning concept.

    Again thanks for the neet product.


    Bugzilla link:http://bugzilla.untangle.com/show_bug.cgi?id=6590

  2. #2
    Untangle Ninja mrunkel's Avatar
    Join Date
    Jul 2008
    Posts
    3,040

    Default

    I don't understand. Why is this better than a port forward?
    m.


    Big Frickin Disclaimer:
    While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions.

    It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,747

    Default

    cause then you could forward based on hostname.

    foo.com goes to 192.168.1.100
    bar.com goes to 192.168.1.101

    It requires you to temporarily endpoint and accept the request before creating the new connection. And they you replay the original request for the correct server.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  4. #4
    Untangle Ninja dwasserman's Avatar
    Join Date
    Jun 2008
    Location
    Argentina
    Posts
    4,367

    Default

    Incidentally this was my request to the Mark Floisan today survey
    The world is divided into 10 kinds of people, who know binary and those not

  5. #5
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,414

    Default

    Yeah, but apache2's reverse proxy... is hokey. I've got a separate VM where I'm doing this so I can run an Apache 2 server, and an IIS server on the same public address. It works, but it does some strange things from time to time.

    Adding that feature to Untangle is really very simple, it's just an extra file in /etc/apache2/conf.d/sites-available, and a symlink in sites-enabled. So integrating Untangle with that feature is a matter of building a GUI for it, and enabling port 80 on the outside.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  6. #6
    Untangle Ninja
    WebFooL's Avatar
    Join Date
    Jan 2009
    Location
    Sweden (Eskilstuna)
    Posts
    5,279

    Default

    @dwasserman
    What survey :P

    I do like Sky-Knight now (Run it in a sepparate box)
    But If UT could have some nice templates and ex for OWA etc then i think it would be a killer function.

  7. #7
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,414

    Default

    WebFool have you navigated the minefield of having it proxy SSL enabled stuff? I have yet to do anything like that, I figured SSL is just best left to direct connections.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  8. #8
    Untangle Ninja
    WebFooL's Avatar
    Join Date
    Jan 2009
    Location
    Sweden (Eskilstuna)
    Posts
    5,279

    Default

    I have a Apache2 infront of 3 Diffrent Exchange servers and all of them have SSL.
    It was a bitch the first time...

    But it aint that hard.
    And if they gui has "Upload Certificat" and "Upload Cert Key file" you have all you need.

  9. #9
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,414

    Default

    And what if you have the unified file?

    Are you using SSL from the proxy to the OWA box? If so is that link self-signed or do you have to buy two certs?
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  10. #10
    Untangle Ninja
    WebFooL's Avatar
    Join Date
    Jan 2009
    Location
    Sweden (Eskilstuna)
    Posts
    5,279

    Default

    We have a own CA server/network and we are about to become a Global Root CA. (just waiting for Msofts approval)
    But yes you need to be able to export the key and cert to separate files.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2