[H-GEN] fowarding port 80

[Joel Michael]

[ Humbug *General* list - semi-serious discussions about Humbug and  ]
[ Unix-related topics.  Please observe the list's charter.           ]
[ Worthwhile understanding: http://www.humbug.org.au/netiquette.html ]

On Tue, 2002-03-19 at 16:20, Jason Henry Parker wrote:
> Please explain how having a Linux box between the Internet and an IIS
> installation makes the IIS install any more resistant to attack.

By sticking squid with a nice set of deny ACLs in between the nasty
hostile internet and the easily exploitable-when-default-installed IIS
box? (but of course locks down their IIS boxes...)

If this is what it is going to be used for, prepare to spend a lot of
time reading your favourite resource for finding out all the new and
exciting exploits for IIS, and updating those ACLs...

*shudder*
-- 
Joel Michael			|  Phone:	+61 7 3367 3555
Systems Administrator		|  Fax:		+61 7 3367 3544
WorldHosting.org Pty. Ltd.	|  Mobile:	+61 408 336 728
http://www.worldhosting.org/	|  Email:	joel at diggy.com.au


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.