Beefy Boxes and Bandwidth Generously Provided by pair Networks
Keep It Simple, Stupid

Re: verify form submission is from a specific place

by gawatkins (Monsignor)
on Jun 17, 2005 at 13:55 UTC ( #467727=note: print w/replies, xml ) Need Help??

in reply to verify form submission is from a specific place


First of, are their any ports currently open, possibly TCP 80 and/or TCP 443? If they are open you could use LWP::Useragent to access a page on your intranet server. The page on the intranet server would handle the AD testing and return a yes/no answer. You could then parse the output on the DMZ server for confirmation.

If there are not any ports open, you could set up a host to host rule on the firewall (Even though you said you wanted to avoid this), where inbound traffic is only permitted from the DMZ server address to the intranet server address. A rule like this is safer than just opening up the port to any internet host.

Hope this helps.
Greg W
  • Comment on Re: verify form submission is from a specific place

Replies are listed 'Best First'.
Re^2: verify form submission is from a specific place
by xorl (Deacon) on Jun 17, 2005 at 14:29 UTC
    No you currently cannot have the webserver request a page from the intranet server. I did suggest something like this. I wasn't shot down exactly, but was told they wanted other options.

      I don't really see much of a way solution, considering your current level of resources. As a very last possible resort you could have the DMZ server email the requests to an account on the Intranet server for processing (which is a whole different security concern), then the intranet server could post the results to a form on the DMZ server. This would REALLY slow the process down, but I believe it to be at least an option if there are not any others.

      Greg W.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://467727]
[Spenser]: I installed 5.22 with opkg. I can use it with cpan. I'm actually trying to install perl-DBD-mysql, but couldn't with it. So I went back to the factory version, 5.10.
[Spenser]: So, nevermind about CPAN. I give up on the downgraded angle. I'm back to fighting to install DBD.
[shmem]: please open a SoPW. At what point is the perl-DBD-mysql installation failing?
[shmem]: do you have the mysqlclient libs on that device, for instance?
[shmem]: and btw, your original questian is an XY Problem classic ;-)
[Spenser]: yes, I have mysql client libs installed.

How do I use this? | Other CB clients
Other Users?
Others exploiting the Monastery: (11)
As of 2018-03-17 12:48 GMT
Find Nodes?
    Voting Booth?
    When I think of a mole I think of:

    Results (224 votes). Check out past polls.