[Geomoose-users] Internet/Proxy?

[Jay Kapalczynski]

Dan / Jim

Thanks for both of your thoughts….its appreciated…I am just starting to explore this…seems that all my questions are loaded ones…hard to ask specific questions when I am entering uncharted territory.
I am not looking for all the answers just something a bit more concrete….where I might be able to ask more intuitive questions.
Again I plead ignorance….this is all new to me…just trying to get some answers…I appreciate your help and thoughts…

Dan…from what you said  “None of the GeoMOOSE tools expose the raw-data to users of the services at large.”  So I should be secure on that end


1.       Say I have an app out there that I only want X amount of users to access and no one else.  Do I configure the individual IPs (users) on the web server to allow access?  Do I use passwords?  Any thoughts?  Say you had a client….Company X….I only want that company to access that data on the app….how can this be accomplished…(IPs configured in the web server?)

2.       Say I had a portal page that has 5 different sites.  How do I secure that so only specific people can enter a specific site.

3.       Say I introduce a MySQL or similar database.  How do I insure security on that data?  Say the database is running on the server and receiving info from another location(on the same server).  The database tables XY coordinates are continually changing and are being rendered in the app by an OGF/OGR file.  I need that table to be inaccessible through the web….

Dan did you mean to say proxies are necessary or unnecessary below?  So If I had my own Web Server, Firewalls I should be fine without a proxy server correct?

I am not against getting someone to host this…but seriously looking at my own server/web server….as you said the apps are pretty light….should be able to go buy a web server for $500-700, get a dedicated internet connection and be alright….

Hope you guys can shed some light on the questions above….If the shapefiles are secure then all I have to be careful about is the images and the database tables.


Thanks Guys


From: Dan Little [mailto:danlittle at yahoo.com]
Sent: Wednesday, July 08, 2009 9:47 AM
To: Jay Kapalczynski; geomoose-users at lists.sourceforge.net; geomoose-developers at lists.sourceforge.net
Subject: Re: [Geomoose-users] Internet/Proxy?

Answering this is a little difficult because the questions are very much "broad stroke" questions and security tends to be more "detail stokes."

1) What are you trying to secure? From whom?  If you're trying to secure the shapefiles from being downloaded then you are fine.  None of the GeoMOOSE tools expose the raw-data to users of the services at large.

2) If you're looking for a hosting solution I'd recommend looking into one of the following:
  a) Host it on a pre-existing server. GeoMOOSE fits nicely inside of an existing IIS or Apache setup.  None of the files are all that large  and with virtual domain hosting it's pretty easy to create "geomoose.mycity.mn.us" or something that gets your online mapping a nice niche on the web.
  b) Pay someone else to do it.  My personal recommendation would be to use BrianF at Houston Eng.  Not only local but Brian has been ACTIVELY contributing back to the project through his MS4W packages *AND* contributes back to the project to get enhancements made.  It also helps that he already has a system setup for doing hosting.

3) Get your IT staff to give you an old server.  GeoMOOSE really doesn't need ALOT to get up and running.  Having a server running MS4W is a pretty light load all things considered and serving up a number of sizable shapefiles never really gets more than about 10-20G.  So a server with something as small as a 60G hard disk with a couple of gigs of RAM is more than sufficient.

Proxies are necessary unless you're trying to do something with cross-site scripting

Firewalls let you block ports on the computer.  Using option a) or b), this configuration would be done for you.  Using option c), you'd harass an IT guy to make sure that only the necessary ports were open to the internet (like oh, just 80 and 443).  If what I just said seems too daunting then maybe option "b)" is the best one. :-)



From: Jay Kapalczynski <jkapalczynski at ci.maple-grove.mn.us>
To: "geomoose-users at lists.sourceforge.net" <geomoose-users at lists.sourceforge.net>; "geomoose-developers at lists.sourceforge.net" <geomoose-developers at lists.sourceforge.net>
Sent: Wednesday, July 8, 2009 9:10:52 AM
Subject: [Geomoose-users] Internet/Proxy?
I have a few questions regarding my GeoMoose application and Other Web Apps I have….and what I need/should do to get it out to the internet.
My main concern is getting the app out to the internet and making sure the data is secure.  I am very new to this and would be most appreciative of any feedback and direction to help figure this out.

I assume I need to find a host, or build the system where I host it (figure that would be expensive)
I have heard about firewalls and proxys etc….but need a bit more help and direction.

Can Anyone briefly outline what I need if I get it hosted vs what I would need if I hosted myself….

Thanks



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.osgeo.org/pipermail/geomoose-users/attachments/20090710/882c65d5/attachment.html