Re: masqerading vs. application proxy
From: Craig Holmes (Leusent@home.com)Date: 09/29/01
- Previous message: Kyle Wheeler: "Firewall without network Stack"
- In reply to: Waldemar Brodkorb: "masqerading vs. application proxy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Craig Holmes <Leusent@home.com> To: focus-linux@securityfocus.com Subject: Re: masqerading vs. application proxy Date: Fri, 28 Sep 2001 23:58:59 -0400 Message-Id: <01092823585900.00929@Weltall.gearbolt.net>
The difference is pretty much:
Using application proxies give you more control over what your internal users
do. If you setup an http proxy, then your users will only beable to use http.
Whereas a NAT firewall allows all connections throught it. with an http proxy
your internal users cannot use irc, realaudio, etc... if thats what you want.
Note that, you can setup a firewall around your nat proxy, so that port
connections to any port but 80 will be denied, but note that someone might
just try changing the port on whatever computer they are trying to connect
to, to port 80. With an http proxy, that wouldnt work.
Craig Holmes
On September 27, 2001 02:47 pm, Waldemar Brodkorb wrote:
> Hello *,
>
> I have a question about firewall's and security on linux.
>
> Is there an advantage to use application proxy's instead of a
> masqerading box to secure a LAN with private IP addresses from
> the dangerous internet.
>
> I don't mean danger from inside the LAN (which could be solved
> through user authentication, IP-based ACL's ...).
>
> When I have to allow users inside my network the use of IRC, ICQ,
> RealAudio/RealVideo or FTP (with a real FTP client), is then an
> application proxy more secure than masqerading?
>
> Under application proxy's I understand the use of squid
> (for http/ftp/https) or dante (for socks5 aware applications).
>
> thanks for any comments.
>
> bye
> Waldemar
- Previous message: Kyle Wheeler: "Firewall without network Stack"
- In reply to: Waldemar Brodkorb: "masqerading vs. application proxy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
