Re: httptunnel : how to detect and block? source code ?
From: Dave Korn (no.spam@my.mailbox.invalid)Date: 02/28/02
- Next message: Rick Kuhn: "Economic Impact of NIST Role Based Access Control Research - report available"
- Previous message: Dave Korn: "Re: computer misuse"
- In reply to: Nimal D. Sirimanne: "httptunnel : how to detect and block? source code ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Dave Korn" <no.spam@my.mailbox.invalid> Date: Thu, 28 Feb 2002 14:22:49 -0000
"Nimal D. Sirimanne" <nimal@pl.jaring.my> wrote in message
news:a5j43a$g6n$2@news5.jaring.my...
> hi,
>
> anybody found a solution to the question, or anything similiar to that, it
> would be very helpfull. source code would be even more helpfull
>
> thanks a bunch
>
>
> David Sullivan
Ok, Mr. whatever your name is(!), your question is a bit vague, but if
what you're referring to is how to stop people connecting to your server
through http proxies, well, one way would be to hold off accepting any
incoming connection while you send a probe back to the remote ip address
seeing if you can connect to any of the well-known http proxy ports
(80/3128/8000/8080). It depends how rigourous you want to be; you could
just disallow any connection incoming from a webserver, or you could try
sending an HTTP connect back to your own server to see if the incoming
machine will proxy connections to your ip.
As for source code, try and hunt down the sources for IRC servers. The
IRC people have had so many problems with people running 'bot wars through
proxies that they've developed code to test incoming connections, see if
they come from proxies, and refuse them if so, so even if you can't re-use
the code directly it'll show you the technique.
hth,
DaveK
-- moderator of alt.talk.rec.soc.biz.news.comp.humanities.meow.misc.moderated.meow Burn your ID card! http://www.optional-identity.org.uk/ Help support the campaign, copy this into your .sig! Proud Member of the Exclusive "I have been plonked by Davee because he thinks I'm interesting" List Member #<insert number here> Master of Many Meowing Minions Holder of the exhalted PF Chang's Crab Wonton Award for kook spankage above and beyond the call of hilarity.
- Next message: Rick Kuhn: "Economic Impact of NIST Role Based Access Control Research - report available"
- Previous message: Dave Korn: "Re: computer misuse"
- In reply to: Nimal D. Sirimanne: "httptunnel : how to detect and block? source code ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
