On Mon, May 22, 2006 at 07:02:59PM -0500, bofh wrote: > On 5/22/06, Craig Skinner <[EMAIL PROTECTED]> wrote: > > > > I'm worried about data driven HTTP attacks getting past the reverse > > Squid proxy on the bastion host and into the LAN server, especially via > > HTTPS when contents are not examined so well. > > > Just curious, why aren't you looking at apache for reverse proxy? >
I had thought of that, just that it seems better to use a tool designed for the job, no? http://www.undeadly.org/cgi?action=article&sid=20040118105719 " You can always use squid for that, performance wise seems a better choice." -- Craig Skinner | http://www.kepax.co.uk | [EMAIL PROTECTED]