Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a public website with an iframe pointing to a private website (only visible inside my company's lan).

I'd like that the iframed pages could also be visible from the outside. Is it possible to achieve?

My public server is a Windows Server 2003 with IIS 6 and the server can browse easily to the private server webpage.

My private server is an Ubuntu 8.04 machine.

I tried with an IIS virtual directory redirection but it's not working.

share|improve this question

Remember your regular webserver is only sending the client's web browser a URL to the internal site. This means that my machine going to your web page and gets a page and an iframe with a URL that by definition it cannot access to your internal web page.

Assuming the web server has access to the internal site, the easiest way to do this is to have a script on the webserver that fetches the requests page from the internal site and some how securely hands it out to authenticated users. This script will also have to take requests from an authenticated web client and pass them to the internal site. That sounds really complicated, untested, and limited and it seems to be the easiest way to do exactly what you want.

If you can change you exact goal slightly...

It is probably easier and more secure to setup a VPN and allow users to connect to the internal network, or at least just the internal web server. There are VPN clients that can be installed on clients ahead of time or via a web browsers add ons (activex, xpi, etc...), and can make the whole setup fairly seemless. This option will likely involve purchasing equipment and/or software, but VPNs are secure, easy and reliable.

Another alternative is to review the internal site, and ask why it is internal? Can you simply make it external? Can the code be audited for security then posted externally? Maybe the data would be safe enough behind a web login and SSL encrypted. This option could be very easy or moderately difficult depending on what the internal site is. This option also doesn't involve any software on the clients machine.

share|improve this answer
+1 couldn't have said it better myself. – Waleed Al-Balooshi Jun 7 '10 at 21:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.