Re: Is NAT can provide some kind of protection?

[William Herrin <bill () herrin us>]

On Thu, Jan 13, 2011 at 1:11 PM, Jack Bates <jbates () brightok net> wrote:
> On 1/13/2011 11:56 AM, William Herrin wrote:
> > So all the folks who use reverse proxies like an http accellerator are
> > wrong?
>
> They have their purpose. However, depending on the security rating of the
> accelerator versus the security rating of the backend server will depend on
> the negative or positive effect it has on overall security.
>
> 1) If backend server has low security rating and proxy also serves to
> protect backend server flaws, then the proxy has a positive security rating.
>
> 2) If backend server is similar or better security rating than the proxy,
> then the proxy server has a negative security rating, as it has introduced a
> second application in the channel which can possibly be exploited. ie, you
> have to worry about backend server security as well as the proxy security,
> and exploiting either can possibly compromise security for both.

That's what I think. I'm curious what Roland thinks.

-Bill


-- 
William D. Herrin ................ herrin () dirtside com  bill () herrin us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004