0
votes
1answer
71 views

What are the security benefits of using a proxy server?

In Wikipedia is written: Security: the proxy server is an additional layer of defense and can protect against some OS and Web Server specific attacks. However, it does not provide any protection ...
0
votes
0answers
38 views

secure apache forward proxy for outgoing adress

HI I want to configure a apache httpd forward proxy to allow proxy to specific destination hosts. So far I have have found documentation of how to control source ips but didnt find any where how to ...
1
vote
2answers
153 views

Filter Websites via Squid

I would like to install Squid to block all the websites and only allow a few websites (whitelist). Each department will have different rules. For example on the Sales department - all the websites ...
2
votes
2answers
128 views

How to configure apache to behave as a remote browser?

For my IT security class summer project, we have to work on different ways to circumvent security measures setup on a school/company network and to explain how these hacks can be detected and avoided. ...
0
votes
1answer
127 views

Stop server's use as proxy

I have a vps server on which I have configured apache as a webserver. Because of unexpected high usage of bandwidth, I checked the access log of my server yesterday. There were a lot of requests of ...
1
vote
1answer
152 views

Apache frontend for Tomcat, proxy security

I have a server that hosts Tomcat for apps and Apache2 for it's frontend. They communicate to each other through ajp protocol over mod_moxy and proxy_ajp modules. Am I really safe using apache ...
2
votes
1answer
334 views

How to secure and audit outbound traffic in an enterprise environment?

What follows is a long-winded background to preface the following question: What is the industry best-practice (or what recommendations would you give) for securing outbound traffic in an enterprise ...
3
votes
4answers
223 views

Is this iptables NAT exploitable from the external side?

Could you please have a short look on this simple iptables/NAT-Setup, I believe it has a fairly serious security issue (due to being too simple). On this network there is one internet-connected ...
1
vote
1answer
57 views

Is it safe to publicly tell the IP of my proxy?

I'm working behind a proxy and I save my code using github.com . My snippets of java code contain some system parameters to tell java about our proxy: System.setProperty("http.proxyHost", ...
2
votes
3answers
494 views

How to protect my credit card transaction data from hackers proxy server? [closed]

I have to make several transaction through credit card. Sometimes, unsecured sites due to business. When transacting through unsecured (have no ssl), is there any way to save my data from hackers ...
0
votes
1answer
224 views

Http server security analyser and sanitizer proxy

I'm looking for software that will monitor all https request coming through our proxy server. We currently use nginx that proxies to our application servers. Ideally, the solution will sit between ...
1
vote
1answer
702 views

How to safely store proxy passwords in system-wide linux config files?

I'm working on a VM in a university environment, where several other users also have root access. Take a config file like /etc/rhsm/rhsm.conf: proxy_hostname = proxy_port = proxy_user = ...
1
vote
2answers
943 views

What “Syn Proxy Servers” are recommended? Or how to build one?

My questions are: 1.) What is a recommended "SYN PROXY SERVER" to filter bogus SYN Attacks and only forward "handshaked" valid connections to the host behind it (to be protected). I search the term, ...
0
votes
2answers
2k views

How do proxy servers filter https websites?

With my limited knowledge of HTTPS I started wondering: How do proxy servers filter HTTPS websites? I mean adding a proxy server is essentially a MITM attack which is what HTTPS was explicitly ...
1
vote
6answers
719 views

Ubuntu 10.04 Proxy Server and SSH Server: am I forced to disable ssh to improve security?

I have a Ubuntu 10.04 proxy server exposed to the internet and I have SSH Server on it to manage it from internal LAN and from remote. It feels simply unsafe, even if I'm using strong passwords... I ...
2
votes
2answers
4k views

How to configure a network to block gmail but allow google apps mail?

Google app mail loads via http://mail.google.com/a/[domain] and gmail loads via http://mail.google.com/mail. How can I block computers on my LAN from accessing gmail urls but at the same time permit ...
0
votes
2answers
122 views

proxy server for virtual machines

I run a series of virtual machines on a server in which people connect to via Vnc. The computers are mostly used for penetration testing so the people involved are pretty techy. My dilemma is that ...
3
votes
4answers
2k views

Can I disable interactive shell access while tunneling web traffic through SSH?

I am looking into implementing SSH tunneling as a cheap VPN solution for outside users to access Intranet-only facing web applications. I currently am using Ubuntu Server 10.04.1 64 bit with OpenSSH ...
1
vote
2answers
202 views

Is SSL to the proxy good enough?

We are currently trying to decide on how best to do SSL traffic in our environment. We have an externally facing Apache proxy server that is responsible for directing all traffic into our environment. ...
1
vote
3answers
170 views

Securing VPN access from users machines (home office)

We already have a couple of people working from home, accessing some internal servers via VPN. They're all using company provided laptops or PCs which we have complete control over. Now we're faced ...
1
vote
1answer
735 views

Using arpwatch to backtrack proxy access ip to eap-tls certificate

In my network I am using eap-tls authentication (machine certificates) for clients. Those clients are using a squid proxy to access the internet. The proxy is logging the request to the access.log. ...
0
votes
2answers
1k views

How does a proxy server work for anonymous browsing?

I have seen that at many places like colleges and schools block sites like Facebook, Myspace. In some cases people are able to use a proxy sites and proxy softwares(ultrasurf,gpass etc.) to bypass ...
1
vote
2answers
2k views

How does IPCOP, dansGuardian and Squid work?

I would like to learn more about how the following works firewalling with IPCOP, web content filtering by Dans Guardian web caching with the Squid. I have visited their web sites but I am having ...
2
votes
5answers
1k views

SFTP: How to keep data out of the DMZ

We are investigating solutions to the following problem: We have external (Internet) users who need access to sensitive information. We could offer it to them via SFTP which would offer a secure ...
2
votes
1answer
2k views

How to configure Apache to reject proxy requests with error code?

I have a server running Apache that often gets unwanted proxy requests, mostly for sites like www.yandex.ru or www.baidu.com. I don't have mod_proxy loaded, so these requests don't actually work. But ...
5
votes
5answers
269 views

Identical traffic

I am running an application server and logging all requests for analysis purposes later. One interesting trend I noticed last night was, I had a visitor from Texas on FIOS share identical traffic ...
1
vote
2answers
129 views

Is it possible to have an external server within a company's firewall?

I am sure this is server admin 101, but I am unsure of the answer and would love some help. I am a software developer I have built an application for a client and am currently hosting it successfully ...
3
votes
6answers
2k views

Do proxies really provide anonymity?

Do web proxies really provide anonymity? I mean, without someone asking for logs in a web proxy server for who/when connected, is it impossible to know who was behind that IP address? I'm asking ...
0
votes
1answer
774 views

Proxy server and ssl over non 443 port security risk

Most http proxy servers do not allow to send ssl over non 443 ports. Why is this a security risk?
2
votes
3answers
540 views

Pros and Cons of a proxy/gateway server

I'm working with a web app that uses two machines, a BSD server and a Windows 2000 server. When someone goes to our website, they are connected to the BSD server which, using Apache's proxy module, ...
1
vote
5answers
2k views

Best all in one linux based proxy,firewall, dhcp and wins server

I help to run a lan in Sydney. We have a need for a proxy/gateway solution to allow those pesky games that require internet to work. I have been doing this with an ISA server and it has worked quite ...
0
votes
3answers
115 views

Can an external server be used to encrypt all traffic

My work takes me to a number of places with WiFi connection. I want to be able to encrypt the traffic between my laptop and the internet. Can I do this with a VPN server? What is the best way to get ...
0
votes
3answers
127 views

Domains and tunneling connections with firefox

I want to know when i use SSH and firefox if someone else can see the domains or any sites i log into (i like using ftp://user%3Apass@site.com). I like to know the information so i can decide if ...
5
votes
2answers
305 views

Could my enterprise proxy know the content of an https request?

Like for instance login into my bank account or knowing what information do I submit via HTTPs? I'm not sure what proxy server do we have.
5
votes
5answers
11k views

Will a reverse proxy in front of web server improve security?

Third-party security professional is recommending we run a reverse proxy in front of the web server (all hosted in the DMZ) as a best practice security measure. I know this is a typical recommended ...
9
votes
6answers
924 views

When/why to use a web proxy/gateway?

Right now we have about a 25-30 PC network, connected to the internet with a run-of-the-mill SonicWall Firewall/Router device. There isn't much filtering / blocking other than outgoing SMTP (for ...
2
votes
9answers
277 views

How can we alleviate security concerns when adding internet-connected 3rd party Windows CE devices to a network?

My company makes devices that run Windows CE and must connect to our website through a customer's internet connection. We sell these devices to all sorts of customers with a multitude of network ...
11
votes
8answers
3k views

How can I download an executable file inside the company network when it's been locked down?

This might seem like a silly (or nefarious) question at first glance, but allow me to elaborate... We have implemented all sorts of measures on the company network and proxy to prevent the download ...