Re: Proxy advantage

[Paul Robertson <probertson () fluiditgroup com>]

Not since "statefull" and "deep packet" inspection became keywords.

Paul
--
President and Chairman, FluidIT Group
Moderator, Firewall-Wizards
http://pauldrobertson.net
http://pauldrobertson.com
@compuwar

On Apr 15, 2013, at 18:21, "Marcus J. Ranum" <mjr () ranum com> wrote:

> Paul D. Robertson wrote:
> > I've always railed against DNS tunneling.  It seems to be rearing its ugly head again.  Today with all the in-band 
> > HTTP attacks, it once again seems the major advantage of a proxy server is not having to pass DNS down to the 
> > client.  Should this be a best practice?
>
> Hasn't it always?
>
> mjr.
>
> -- 
> Marcus J. Ranum        CSO, Tenable Network Security, Inc.
>            http://www.tenable.com
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () listserv icsalabs com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards