Security Basics mailing list archives

RE: Unrestricted Outbound Web Server Access Opinion


From: "David Gillett" <gillettdavid () fhda edu>
Date: Wed, 4 May 2005 15:38:34 -0700



There are a few common reasons to allow your webserver to have
unrestricted outbound access.  DNS for local daemon name resolution,
SMTP for any mail that may need to be sent, NTP for keeping accurate
time, and so on.  

None of these requires *unrestricted* outbound access.  In every case,
the outbound access that is necessary is well defined and can be easily 
restricted to just what is needed.

David Gillett





Current thread: