Re: Putty Proxy Chaining

From: Richard E. Silverman (res_at_qoxp.net)
Date: 06/29/05

  • Next message: Mike - EMAIL IGNORED: "newbie: ssh & xinetd" 
    Date: 29 Jun 2005 17:47:08 -0400

    > The client is installing a web proxy and all outgoing connections will
    > need to go via this proxy. Only outgoing connections to ports 80 and 443
    > will be allowed.

    Have you tried telling your client that this is pointless? Since you will
    enable the CONNECT method for port 22, the overall setup allows
    connections to that port as well and the stated restriction does not
    actually obtain. You may as well simply allow direct connections to SSH
    and log them (since logging them is all the proxy can do anyway; it can't
    inspect or modify them). 

    -- 
  Richard Silverman
  res@qoxp.net
  • Next message: Mike - EMAIL IGNORED: "newbie: ssh & xinetd"

    Relevant Pages

    • Re: Re: Port 1433 is open to internet, how can I secure db?
      ... >instead of direct connections or re-architecting the solution. ... I will definitly change port numbers.. ... "You should also look at using an intermediary broker ...
      (microsoft.public.sqlserver.security)
    • Re: Putty Proxy Chaining
      ... > connections to that port as well and the stated restriction does not ... You may as well simply allow direct connections to SSH ... The overall setup does not allow direct connections to port 22 as this ... is behind a firewall on the server host network. ...
      (comp.security.ssh)
    • Re: A question about a basic security setup...
      ... > I have been thinking about a setup for my basic ADSL network at home that ... > before I go through motions of setting up the network. ... > I am running a web server on port 80. ... > machine for all port 80 requests. ...
      (Security-Basics)
    • Re: cannot connect to /remote externally
      ... account to a static IP account, or use another port for the server. ... Les Connor [SBS MVP] ... does not work for the Default Website setup in IIS. ...
      (microsoft.public.windows.server.sbs)
    • Re: cannot connect to /remote externally
      ... Les Connor [SBS MVP] ... account to a static IP account, or use another port for the server. ... > does not work for the Default Website setup in IIS. ...
      (microsoft.public.windows.server.sbs)