umm....
i think the most important way in which a proxy differs, and many people
forget this, is that it does -not- pass on the same session.
a proxy creates a connection ON BEHALF OF whatever you want to proxy (HTTP,
FTP, POP, ...). a connection comes in, the proxy checks if it may go
through depending on whatever policy or mechanism it uses (which may simply
be packet filternig or stateful inspection) and then CREATES A NEW
connection to the destination for you. it is not -your- traffic that
reaches the destination, but the traffic the proxy has decided to let through.
this difference is very important, as the sequence and ack numbers in the
packets change at the proxy.
At 06:49 18/04/01, acs wrote:
>mmm yeah but checkpoint claims to do more..
>
>Gauntlet has a real proxies and packet filtering.
>
>acs
>
>
>--- Bill Royds <[EMAIL PROTECTED]> wrote:
> > A packet filter looks only at the IP and TCP/UDP
> > headers (it may assemble the stream for TCP) but not
> > at the contents of the packet.
> > An Application Proxy firewall looks at the full
> > contents of packets and checks for conformance to
> > the application (HTTP, Pop3 FTP) service RFCs.
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Yap Kung Leng
> > Sent: Tuesday, April 17, 2001 22:57
> > To: [EMAIL PROTECTED]
> > Subject: Packet Filtering & Proxy Server
> >
> >
> > Hi all,
> >
> > I am a newbie. Can anyone tell me what are the
> > different between Packet
> > Filter & Proxy Server?
> >
> > Thank you all
> >
> > Regards,
> > KL Yap
> >
> > -
> > [To unsubscribe, send mail to
> > [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> >
> > -
> > [To unsubscribe, send mail to
> > [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
>
>
>__________________________________________________
>Do You Yahoo!?
>Yahoo! Auctions - buy the things you want at great prices
>http://auctions.yahoo.com/
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
