Firewall Wizards: Re: SSL

[teo () gecadsoftware com]

Hi Crumrine,!
On Tue, 16 Oct 2001, Crumrine, Gary L wrote:

>       Just a quick question on SSL.  If I allow SSL outbound, and a user
> browses a web site that is corrupt with something harmful like NIMDA, is it
> possible that they will infect my network... and will the firewall not pass
> it along without checking?
If you allow SSL only for already established connection, I don't think so.
>       If true, how can I combat this?  Is there a product that will stop
> the packets and inspect them before being returned to the requester? 
I guess, in terms of iptables if you add -m state --state ESTABLISHED,RELATED
to accepted packets from outside then you are safe.

-- teodor
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards