Re: Proxy advantage

["Marcus J. Ranum" <mjr () ranum com>]

Paul D. Robertson wrote:
> I've always railed against DNS tunneling.  It seems to be rearing its ugly head again.  Today with all the in-band HTTP 
> attacks, it once again seems the major advantage of a proxy server is not having to pass DNS down to the client.  Should 
> this be a best practice?

Hasn't it always?

mjr.

--
Marcus J. Ranum         CSO, Tenable Network Security, Inc.
                        http://www.tenable.com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards