On Thu, Sep 25, 2008 at 06:43:47AM -0700, Vieri Di Paola wrote:
> 
> --- On Thu, 9/25/08, Roberto C. Sánchez <[EMAIL PROTECTED]> wrote:
> 
> > [ First, please fix your mail client to properly wrap lines. ]
> 
> I'm using Yahoo's webmail.
> Will have to subscribe from another account.
> 
If you use "plain text" instead of "rich text" it should work properly.

> > Your best bet is to use squid.  Squid has a nice acl feature that allows
> > you do block based on domain name and/or url key words. 
> 
> Thanks but what if I don't know beforehand the domain names and/or url
> keywords?
> 
I'm not sure.

> I already setup once a custom http tunnel with a ssh server to take
> control of a remote host via vnc, bypassing its firewall (however, the
> remote host did not have a proxy). I suppose that by forcing the use
> of Squid the HTTP requests/replies will be done by the proxy itself so
> they will be "truely http".
> 
> What about HTTPS?
> 
> According to
> http://wiki.squid-cache.org/SquidFaq/AboutSquid#head-593dae4b6b740816917a6cc2ce5854d3d43624ee
> it seems that HTTPS connections are just passed through. So I guess
> that if port 443 is allowed then applications "such as" LogMeIn could
> go through that port.
> 

Think about it for a minute.  If you could intercept the https packets
and look inside of them, then so could anybody.  What would be the point
SSL then?  It would be worthless.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to