Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a box which is on the network in the office, and people can access my apache server that is running when the people are on the network.

What do I have to do to enable people from outside our office (lets say some clients, or even me at home) to be able to get to the instance of apache which is running on my box?

Thanks, Alex

share|improve this question
    
What model router does the office use? That will determine if we can answer it here, or if the great people over at Super User will be able to answer it. –  Mark Henderson Apr 1 '11 at 0:55

1 Answer 1

up vote 2 down vote accepted

In general terms you should at your office's router or firewall add a static NAT to map an internet public address to the internal IP address of your web server.

Then you should allow traffic to port 80/443/other on your public IP address to the range of IP address you want to provide this access to (assuming it is not the whole Internet).

Or you could have your clients (and/or you) connect via VPN (IPSec/SSL/L2TP) to your office and then to your server.

Not knowing what kind of firewall/router and network topology you have makes it difficult to give more detailed instructions.

Anyways, regardless of the kind of hardware you have, it is not a good security practice to allow access from outside your network to resources on your internal network. There maybe misconfiguration/bugs on your web server or on the applications that are running on top of it and this may jeopardize the security of your server and by cause and effect, of your internal network. This is what DMZs are good for.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.