Re: NEW QUESTION on INTRANET vs. INTERNET.

[BMay@xxxxxxxxx]

Ok, here goes.

In /www/nameofport80webserver/conf/ , you will find the httpd.conf file. 
You need to edit it and add the following things:

LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_ftp_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
ProxyPreserveHost On

ProxyPass /dirname http://127.0.0.1:8000/dirname
ProxyPassReverse /dirname http://127.0.0.1:8000/dirname

Where "dirname" is the name of the directory in the zendcore htdocs that 
you want to make accessible.  Yes, it is possible to open up the whole 
htdocs folder, but I generally don't suggest it.  By doing it folder by 
folder, you can control which are accessible to the outside world and 
which are only accessible via port 89.

You may have noticed port 8000 in the directives.  This is the Apache 
server running in PASE that Zend uses.  It should already be there so 
nothing to configure there.

I usually put the first group of directives at the top of the httpd.conf 
file and the ProxyPass pair at the bottom.  I don't know if that makes a 
difference.  It's just the way I was taught to do it.

Once you have edited the httpd.conf file, you will need to restart the 
port 80 web server.

You are right to secure port 89.  You don't want someone outside to get 
into your PHP configurations.

As for opening yourself to other problems, there is always that risk.  It 
depends on your PHP code and what it does.  Biggest threat is probably SQL 
injection.  You can read up on the web about the different possibilities.

HTH,

Brian May
Project Lead
Management Information Systems
Garan, Incorporated
Starkville, Mississippi

Young i Professionals
http://www.youngiprofessionals.com



"Tom Deskevich" <thomas.l.deskevich@xxxxxxxxxxxxx> 
Sent by: web400-bounces@xxxxxxxxxxxx
10/09/2009 01:07 PM
Please respond to
Web Enabling the AS400 / iSeries <web400@xxxxxxxxxxxx>


To
"'Web Enabling the AS400 / iSeries'" <web400@xxxxxxxxxxxx>
cc

Subject
[WEB400] NEW QUESTION on INTRANET vs. INTERNET.






Ok, how do I setup ProxyPass and ProxyPassReverse?

Also, is this exposing me to any risks, as mentioned in the previous 
email?

I do have port 89 setup to force as/400 credentials to be entered. 

So as soon as they hit port 89, they are presented with a sign on dialog. 



Tom Deskevich
Infocon