OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Power Steve (steve.powerbarclaycard.co.uk)
Date: Tue Oct 02 2001 - 05:27:28 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

            to follow up on this note,
            I was considering using a reverse proxy (linux with squid forwarding
    requests to an IIS server from clients on the internet- I don't like IIS
    talking to anybody directly, if I can help it). Im trying to build a case
    for this atm, and your note has made me think that using squid would prevent
    anyone running a cmd shell over port 80 (using netcat for instance)? would
    the reverse proxy stop all but http/ssl connections?
            also, don't suppose anyone knows a way of restricting Get requests
    etc through squid? i.e. if a request does not equal x/y/z then drop the
    request?
    cheers

    Legal Disclaimer:-

    Please be aware that messages sent over
    the Internet may not be secure and should
    not be seen as forming a legally binding
    contract unless otherwise stated.