Re: High performance/scalable firewalls

[Chip Christian]

[EMAIL PROTECTED] said:
> Historians claim that David Lang wrote:
>> SSL not much you can do other then to allow it. This is packet
>> filtering
>> stuff.

> Not really, Netscape, amoungst others makes a http(s) proxy that works
> in t"reverse mode".. It could act as the real webserver, that way no
> machines not under your control have access to  the webserver (watch
> that double negative).

> This would allow for atleast some screening of the application data,
> as well as you can use a OS with a known/good/robust  TCP stack to
> protect against pathological TCP streams.

> You also get several optinos on where to install  SSL certificates
> depending on your needs. 

Sure enough.  I'm using Stronghold to do this.  Part of the application 
runs on IIS, so I had to do something to protect it...

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]