Re: Protecting publicly reacheable servers (e.g. HTTP)?

["Marcus J. Ranum" <mjr () nfr com>]

ark () eltex ru wrote:
> I am still trying to figure out how to prevent data-driven attacks
> on proxy level.

I don't think it can be done. The only chance is to be super
restrictive in what you accept - to the point of accepting
nothing. If you do that, you generally defeat your objectives
if you're trying to actually exchange information with
someone. :(

mjr.

---
Marcus J. Ranum     Chief Technology Officer, NFR Security Inc.
Work:  http://www.nfr.com
Play: http://www.ranum.com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards