RE: reverse proxy identification

-----Original Message-----
Subject: reverse proxy identification

When I browse to the IPs with firefox, I recieve several messages "No web
site is configured at this
address." for some IP.
Does anybody here know if this message is specific to a given reverse
proxy/web server product ?

That's an IIS message.

For evidence of a reverse proxy - particularly one that's doing app
firewalling - look for it to block stuff that's attack-like. For instance:

Request: /sexpistols.asp?track=god%20save%20the%20queen
Response: 200

Request: /sexpostols.asp?track=anarchy/../in/../the/../uk
Response: 302, 404, or some other response that suggests the app never saw
your request

If you're using Nessus, recent versions will often report the presence of
urlscan when a web app 'firewall' is in front of the actual web server.

PaulM



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------

Relevant Pages

  • ASP.Net reverse proxy image problem
    ... I'm attempting to write a reverse proxy in ASP.Net which will catch ... requests to my server in ASP.Net, perform some actions, and then get ... client (using HttpWebRequest and rewriting it's response to my ASP.Net ... // Get Response and write it's stream back to the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: "middleman" server
    ... Look at the Apache documentation for mod_proxy, reverse proxy. ... Reverse Proxy looks very much like the ticket. ... How could I process the response before sending it to the user? ...
    (comp.os.linux.networking)
  • Re: "middleman" server
    ... Look at the Apache documentation for mod_proxy, reverse proxy. ... Thanks, Dan. ... Reverse Proxy looks very much like the ticket. ... How could I process the response before sending it to the user? ...
    (comp.os.linux.networking)
Quantcast