Re: High performance/scalable firewalls

[Chad Schieken]

Historians claim that David Lang wrote:
> SSL not much you can do other then to allow it. This is packet filtering
> stuff.
> 

Not really, Netscape, amoungst others makes a http(s) proxy that works
in t"reverse mode".. It could act as the real webserver, that way no 
machines not under your control have access to 
the webserver (watch that double negative).

This would allow for atleast some screening of the application data,
as well as you can use a OS with a known/good/robust  TCP stack to
protect against pathological TCP streams.

You also get several optinos on where to install  SSL certificates
depending on your needs.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]