Re: Query: Why bother with an application proxy over stateful packet filtering?

["Patrick M. Hausen" <hausen () punkt de>]

Hi, Will,

> I am wondering why would the be a need to web up a proxy such as a web
> proxy (Squid) instead of just using a stateful packet filtering firewall
> (iptables) only in a network?

I suggest you start by reading these two papers for an answer:

http://www.avolio.com/papers/apgw+spf.html
http://www.securecomputing.com/webform.cfm?id=123

The latter requires one-time registration to download,
so Secure Computing can send you sp^H^Himportant security
related information.

Kind regards,
Patrick M. Hausen
Leiter Netzwerke und Sicherheit
-- 
punkt.de GmbH * Vorholzstr. 25 * 76137 Karlsruhe
Tel. 0721 9109 0 * Fax 0721 9109 100
info () punkt de       http://www.punkt.de
Gf: Jürgen Egeling      AG Mannheim 108285
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards