Full Disclosure mailing list archives
Re: Proxies
From: Ben Nelson <lists () venom600 org>
Date: Fri, 31 Oct 2003 15:30:52 -0700
only understands HTTP (to prevent other services from being tunneled over port 80), you should be good to go.That isn't going to stop other services from being tunneled over port 80. There quite a few ways to do this. See Firepass. It is a tunneling tool, allowing one to bypass firewall restrictions and encapsulate data flows inside legal ones that use HTTP POST requests. TCP or UDP based protocols may be tunneled with Firepass
Very true. Bottom line....there will always be a way. It's just a matter of how sophisticated your clients (K-12 students and teachers in this case) are. If you can narrow the illegal traffic down enough that any breaches are an anomoly that is caught by your IDS (or some other form of monitoring), then you're doing well. Once the anomoly shows up, you can enforce your policy; which I should mention should also be an integral part of the security architecture. If you can't enforce the policy, there's no incentive to follow it.
$.02 --Ben _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Proxies Earl Keyser (Oct 31)
- Re: Proxies Jan Meijer (Oct 31)
- Re: Proxies Ben Nelson (Oct 31)
- Re: Proxies Gary E. Miller (Oct 31)
- Re: Proxies nosp (Oct 31)
- Re: Proxies Charles E. Hill (Oct 31)
- Re: Proxies Valdis . Kletnieks (Oct 31)
- Re: Proxies Ben Nelson (Oct 31)
- Re: Proxies Richard Spiers (Oct 31)
- RE: Proxies adam.richards (Oct 31)
- Re: Proxies Ben Nelson (Oct 31)
- Re: Proxies Richard Spiers (Oct 31)
- Re: Proxies Jakob Lell (Oct 31)
- <Possible follow-ups>
- RE: Proxies Bassett, Mark (Oct 31)
- RE: Proxies S G Masood (Oct 31)