> The thing that really concerns me is, that this general problem has been > known to be an issue with plain HTTP proxies like the Squid since ages > (see e.g. http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.14). And > why didn't Checkpoint prevent or at least document this? Tunneling mode has always been a bad idea.
The way you restricted this in Squid is to define a list of addresses which are allowed to use the proxy. With CheckPoint you should do the same thing by restricting access to the security server in your ruleset. -don ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
