I know that the Raptor proxy checks for conformance to HTTP RFC's. A common complaint
on Raptor mailing list is that it won't pass Microsoft SOAP through the firewall
because it rejects the extra HTTP commands introduced by Microsoft.
Same thing applies to DNS, SMTP, FTP and NNTP. This sometimes causes people to say
FW-1 must be "better" because it doesn't "break" on non-standard traffic.
But it is true that modern packet filtering firewalls go into more depth (find ports
used by FTP for example).
I was just giving a simplistic definition.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ron DuFresne
Sent: Wednesday, April 18, 2001 02:57
To: Bill Royds
Cc: Yap Kung Leng; [EMAIL PROTECTED]
Subject: RE: Packet Filtering & Proxy Server
I see this answer alot, yet, have watched awhile, and asked a few times,
how deeply? How far into the packet do the various proxies delve? Is
that not the way to determine how they rank against one another? How
effective they are in securing a protocol would be addressed with some
clarification in this area, no? How much information is there giving
these kinds of details? Is there a site out here with a detailed markup
of various proxies that folks can compare the depth of the processing a
proxy goes to determine compliance with a sites policy?
Thanks,
Ron DuFresne
On Tue, 17 Apr 2001, Bill Royds wrote:
> A packet filter looks only at the IP and TCP/UDP headers (it may assemble the stream
>for TCP) but not at the contents of the packet.
> An Application Proxy firewall looks at the full contents of packets and checks
>for conformance to the application (HTTP, Pop3 FTP) service RFCs.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Yap Kung Leng
> Sent: Tuesday, April 17, 2001 22:57
> To: [EMAIL PROTECTED]
> Subject: Packet Filtering & Proxy Server
>
>
> Hi all,
>
> I am a newbie. Can anyone tell me what are the different between Packet
> Filter & Proxy Server?
>
> Thank you all
>
> Regards,
> KL Yap
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
***testing, only testing, and damn good at it too!***
OK, so you're a Ph.D. Just don't touch anything.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
