Re: Proxy advantage

"Marcus J. Ranum" <[email protected]> Mon, 15 Apr 2013 18:21:42 -0400
Newsgroups gmane.comp.security.firewalls.wizards
Message-ID <[email protected]>
Paul D. Robertson wrote:
> I've always railed against DNS tunneling.  It seems to be rearing its ugly head again.  Today with all the in-band HTTP attacks, it once again seems the major advantage of a proxy server is not having to pass DNS down to the client.  Should this be a best practice?

Hasn't it always?

mjr.

-- 
Marcus J. Ranum		CSO, Tenable Network Security, Inc.
			http://www.tenable.com