Re: Proxy advantage

Paul Robertson <[email protected]> Tue, 16 Apr 2013 04:46:56 -0400

Newsgroups	gmane.comp.security.firewalls.wizards
Message-ID	<[email protected]>

Not since "statefull" and "deep packet" inspection became keywords.

Paul
--
President and Chairman, FluidIT Group
Moderator, Firewall-Wizards
http://pauldrobertson.net
http://pauldrobertson.com
@compuwar

On Apr 15, 2013, at 18:21, "Marcus J. Ranum" <[email protected]> wrote:

> Paul D. Robertson wrote:
>> I've always railed against DNS tunneling.  It seems to be rearing its ugly head again.  Today with all the in-band HTTP attacks, it once again seems the major advantage of a proxy server is not having to pass DNS down to the client.  Should this be a best practice?
> 
> Hasn't it always?
> 
> mjr.
> 
> -- 
> Marcus J. Ranum        CSO, Tenable Network Security, Inc.
>            http://www.tenable.com
> 
> _______________________________________________
> firewall-wizards mailing list
> [email protected]
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards