Re: Reverse Proxy and Link Encoding

[Death Star <deathstar2k3 () hotmail com>]

In-Reply-To: <Pine.LNX.4.44.0305312349140.17988-100000 () kisogawa ethz ch>

Have you ever used SQUID ... there are many ways that you can actually 
custimize this proxy to provide access control. As for content replacement 
it can be done using XML. A nice XML script can be written to parse, 
remove, and replace content on both inbound and outbound communications.

check http://www.squid-cache.org/

________________________

 .:[Death Star]:.
> > > --->.*.<---<<<
 
> Hi all
>
> I have a follow-up question to Dean's inquiry on reverse proxies...
>
> I am looking for a reverse proxy that does not let _any_ client-provided
> data through. This would be achieved by parsing all web pages in order to
> identify the hyper links contained. Then, all the hyper links would be
> replaced by the proxy's address and a suitable encoding. Also, the proxy
> would maintain a table with all the encodings and the original link. When
> the client requests such an encoded link, the proxy would do a lookup in
> the table and retrieve the original link.
>
> Example:
>
> 1) Proxy retrieves some web page that contains the link
>   http://www.foo.com/
> 2) Proxy replaces this link in the web page by something like the
>   following link: http://proxy/77352102 and sends the resulting
>   page to the client.
> 3) Client hits the link. Proxy analyzes the encoding and does the lookup
>   in the table to find the original link. It retrieves the page, parses
>   the content, replaces links, and sends the result to the client again.
>
> (Startup: The proxy would have a well-defined collection of possible links
> that are already encoded and serve as a starting point.)
>
> I am aware that such a proxy is quite prohibitive with regard to browsing
> the web. However, it can be useful in environments that must prevent
> potentially hostile traffic (e.g. "hacked" URLs, malformed POST data 
etc.)  
> to leave to the Internet and still allow basic browsing capabilities.
>
> Does anybody know of a proxy that does this (or something similar)? (My 
> research has not been successful so far.)
>
>
> Thanks
> myke.