I must agree ;-) .-. /v\ L I N U X // \\ >Phear the Penguin< /( )\ ^^-^^ "Reckhard, Tobias" To: SuSE Subject: RE: [suse-security] AW: Squid on Firewall? 27.03.2001 07:44

AFAIK you should NEVER use a proxy etc. on any firewall due to the buffer- overflow-problem. sorry...

Huh? Get real, man, with that attitude you shouldn't connect anything to an untrusted network, as any application could be susceptible to buffer overflows. And check out the literature on firewalls whenever you have a bit of spare time, I recommend the 2nd edition of 'Building Internet Firewalls' by Chapman, Cooper and Zwicky. Most, if not all, of the firewall people prefer application layer gateways, aka application proxies, over packet filters when constructing firewalls. And I'd much rather have only one application, the proxy, to watch for a compromise than the entire number of client applications.. Cheers, Tobias --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com