F-Secure Internet Gatekeeper for Linux/Administrator’s Guide
128
10.5
Reverse Proxy Settings
F-Secure Internet Gatekeeper for Linux can be set up as a reverse proxy to scan connections from a
client to a specific web server.
It is also possible to implement the product as a transparent proxy, which makes it possible for a
single Internet Gatekeeper to scan multiple web servers. To implement a transparent proxy, see
“
Transparent Proxy
”, 108.
10.5.1
Reverse Proxy – Typical Settings
If the product is implemented both on a web server and on a separate server, it must be placed in front
of the web server for it to appear as a web server on the Internet. The following diagram illustrates the
setting.
Internet Gatekeeper settings
At the web console, configure the proxy port and parent server port to 80:
Proxy settings
HTTP proxy:
On
Proxy port:
80
Parent server:
Host name:
Web server
Port number:
80
DNS/Web Server settings
Set the IP address (as seen from the Internet) of the web server to the address of the Gateway. You
can do this by using one of the methods below:
•
Method 1 – Change the IP address at the web server
Change the IP address of the previous web server. Set the previous IP address as the IP address
of the product.
•
Method 2 – Change the IP address assigned to the web server by using the DNS server
Using the DNS settings, set the IP address (as seen from the Internet) of the web server as the
address of Internet Gatekeeper.
Internet Gatekeeper
Web server
80
80
Internet