Host Header Redirection

[Dende]

Hi,

is it possible to confige the Checkpoint Firewall to redirect Host Header entrys to different webservers?

for example: We only have one externel IP address 65.65.65.65 and want to Redirect www.example1.com to webserver 192.168.1.1 and www.example2.com to webserver 192.168.1.2?

4607 - Security Gateway Appliance

regards,
Dende

[Cory Webb]

Most web servers should be able to distinguish sites based on URL headers. This is something that should be done by the web server function and not the firewall. The firewall sees the traffic coming in on the external interface as the same socket IP:dport. So you shouldnt have to change anything with its configuration. DNS should be ok too:

www.example1.com 65.65.65.65
www.example2.com 65.65.65.65


Otherwise, if you dont have any more public IP addresses, you've got two choices: Either have more virtual hosts per physical server, or request a larger public address allocation.

[avdonzzz]

This should not be the job of the firewall. A load-balancer can does this pretty easily.

[abusharif]

It has been more than 15 years since i touched URI resources in CP, but yes it could be done IIRC. But its a bad bad legacy feature, so just don't go that way and listen to the gentlemen that responded before me.