[LARTC] RE: [Lula] Routing Web to internal IIS servers

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi, Todd

What kind of tests you did ?

Thanks a lot for the tips... I'm changing it NOW

cheers

Diogo Carlos Fernandes
Technical Support Manager

Real Media Latin America 
www.realmedia.com 

Phone .: 55+11+3842-2166 
Mobile .: 55+11+9266-5325 
e-mail .: dfernandes@xxxxxxxxxxxxx 



-----Original Message-----
From: lula-admin@xxxxxxxx [mailto:lula-admin@xxxxxxxx] On Behalf Of Todd
Lyons
Sent: Saturday, March 29, 2003 2:45 AM
To: MrBiTs
Cc: lula@xxxxxxxx; lartc@xxxxxxxxxxxxxxx; henrique@xxxxxxxxxxx
Subject: Re: [Lula] Routing Web to internal IIS servers


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

MrBiTs wanted us to know:

>                   <Directory proxy:*>
>                           Order deny,allow
>                           Allow from all

BAD BAD BAD!!!  You just told it to proxy ANYTHING instead of just the
domains that you want.  I just checked, I was able to proxy through your
machine to my website.  It won't be long that spammers and porn dealers
will be using your machine to proxy to them which masks their identity
to the untrained eye.  Interestingly, when I go to google.com, it brings
up www.google.com.br because it appears to be sourcing it from your IP
(you are proxying it).

Fix that now before it becomes abused!
- -- 
Blue skies...	Todd 	Public key: http://www.mrball.net/todd.asc
>SELECT * FROM users WHERE clue > 0
0 rows returned                        --Steve "BOFH" B.
Linux kernel 2.4.19-24mdk   7 users,  load average: 0.04, 0.01, 0.00
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: http://www.mrball.net/todd.asc

iD8DBQE+hTLjIBT1264ScBURAt/MAKCPVrcUGmlnruUFnF/jTECO83zs1gCgjkmY
kJGDC1WlBQ4X+PlebRyMtiE=
=2RDo
-----END PGP SIGNATURE-----
_______________________________________________
Lula mailing list
Lula@xxxxxxxx
http://www.lula.org/mailman/listinfo/lula

Esta mensagem foi verificada pelo E-mail Protegido Terra.
Scan engine: VirusScan / Atualizado em 26/03/2003 / Versão: 1.3.13
Proteja o seu e-mail Terra: http://www.emailprotegido.terra.com.br/





[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux