There are 2 machines - both running Windows Server.
Machine1 can access the internet. Machine2 cannot access the internet, but can access Machine1.
Machine2 needs to continuously access one external
https GET URL on the internet. So the way I was thinking of doing this is by running a lightweight proxy server on Machine1 using this as a proxy for Machine2 to access the external URL.
(I know that a better/more secure solution may be to have let Machine2 access the internet with a firewall blocking everything except the required connection - but unfortunately that is not possible in this case because various reasons)
After searching around, it seems that the general approach is to use a Webserver (Apache/nginx/IIS) running on Machine1 as a forward proxy server - there seem to be very few independent proxy servers available any more - the few independent proxies available don't seem to in active developement or support.
Is this approach secure - i.e. can Webservers be locked down securely enough so that they only serve as proxies and not add anly additional security issues? What kind of problems should I be wary of?