5.2 How do I make Web/HTTP work through my firewall?
There are three ways to do it.
- Allow ``established'' connections out via a router, if you are
using screening routers.
- Use a web client that supports SOCKS, and run SOCKS on your
- Run some kind of proxy-capable web server on the bastion host.
Some options include
and http-gw from the TIS firewall toolkit. Most of
these can also proxy other protocols (such as gopher and ftp), and
can cache objects fetched, which will also typically result in a
performance boost for the users, and more efficient use of your
connection to the Internet. Essentially all web clients (Mozilla,
Internet Explorer, Lynx, etc.) have proxy server support built
directly into them.