Hot answers tagged

5

You're setting up your SSH SOCKS proxy by SSH'ing to the local machine, and telling it to listen on the unspecified address (0.0.0.0), which translates to ALL IP addresses. If you're not configuring a firewall to control access to port 1080, then you've just set up an open proxy for anyone to (ab)use.


3

1) Can I set up Y to appear as an "SMTP server" that just relays the emails/requests sent to it from X, to my actual SMTP server? Yes, edit Y /etc/postfix/main.cf and configure: mynetworks = 10.0.0.0/8 To accept email only from X (Set the X IP range here) relayhost = [1.2.3.4] To do relay (Set the SMTP IP address here) 2) Can I do so with ...


2

Yes, you can do this; this sort of setup is commonly referred to as a bastion host or jump host. However, when implementing any security practice, it's useful to build an explicit threat model: what attacks are you trying to protect against? A current employee from doing things they shouldn't (perhaps accidentally)? A former employee using old credentials ...


2

In the intervening 3.5 years since this question was asked, I presume you found an answer. But if you didn't, this is what I do on my iPad and iPhone (screenshots from my iPhone since it's what I had handy as I sat in the airport). Go to Settings, Wi-Fi Then tap the (i) button on the appropriate SSID Scroll down and turn on Manual under HTTP PROXY, ...


1

Basically there are three big steps in your workflow Encryption and decryption process either by STARTTLS or SMTPS Authentication process i.e. to check if you allowed to do SMTP transaction SMTP Transcription (MAIL FROM, RCPT TO and so on) As far as I understand, you want to use nginx to do step 1, and transparently pass the rest of the transaction to ...


1

You want to put mitmproxy in reverse proxy mode: http://docs.mitmproxy.org/en/latest/modes.html


1

There is a list of squid analyzers but unfortunately some of them seem to be out of date. http://www.squid-cache.org/Misc/log-analysis.html In the past I used LightSquid but it requires Apache. I tested with Calamaris and found that this old perl script worked perfect. mkdir logfile cd logfile/ wget http://cord.de/files/calamaris/calamaris-2.59.tar.gz ...


1

As far as I know, NGINX cannot forward requests this way: it always manage the ssl handshake by itself. However, haproxy and sniproxy seems to do the job, according to the answers given in this thread: Can a Reverse Proxy use SNI with SSL pass through?



Only top voted, non community-wiki answers of a minimum length are eligible