I have an ec2 instance (proxy
) which is being used as http proxy server. There are some other hosts (hostA
, hostB
, hostC
), I want the proxy server will only allow connection from those hosts.
For this I changed the security group and add those hosts as source and 80
as port
Port | Source
---------+----------
80(HTTP) | hostA/32
80(HTTP) | hostB/32
80(HTTP) | hostC/32
At this point no other host than hostA
, hostB
and hostC
can access Proxy
.
But what if someone from other aws machine creates a fake IP packet with fake source address. Will the interface (eth0
) to accept it?
Is there any other security measure I should take other than security group settings?