Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Nov 2001 09:22:20 -0500
From:      Mike Tancsa <mike@sentex.net>
To:        anderson@centtech.com, freebsd-security@FreeBSD.ORG
Subject:   Re: NAT vs Application layer proxy
Message-ID:  <5.1.0.14.0.20011112091952.06b2cb30@marble.sentex.ca>
In-Reply-To: <3BEFDB90.9CD7AEB7@centtech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 08:24 AM 11/12/01 -0600, Eric Anderson wrote:
>What are some of the advantages/disadvantages of an
>application layer proxy server, versus a box running NAT
>with packet filtering on it (like ipfilter or IPFW)?

Auditing is a big one.  Also, you can do neat things like block NIMDA 
infected sites with Squid.

         ---Mike



>Eric
>
>
>--
>-------------------------------------------------------------
>Eric Anderson   anderson@centtech.com    Centaur Technology
>No single raindrop believes it is to blame for the flood.
>-------------------------------------------------------------
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.0.20011112091952.06b2cb30>