NYCPHP Meetup

[Matthew Terenzio]

Well, I wrote that before I read a bunch of followup to the original 
post, but that sounds more like a proxy to me. Some firewalls just 
filter based on rules but don't change the original packet.
But anyway, that was superceded by a bunch of suggestions by some more 
knowledgable than me. Good Luck.
On Mar 24, 2004, at 5:47 PM, Faber Fedor wrote:

> On Wed, Mar 24, 2004 at 05:14:04PM -0500, Matthew Terenzio wrote:
>>> Fine.  But how do I stop Cracker Joe from emulating the web server 
>>> and
>>> breaking into the database?
>>
>> limit access to the database from  the web server IP address for one
>
> But how?  Once the packet have gone through the firewall, the IP 
> Address
> has been changed.  Any packets hitting Prodn:80 are going to be seen
> coming from 192.168.1.1 whether the original packet is coming from
> the Web Server or from Cracker Joe.
>
>
> -- 
>
> Regards,
>
> Faber
>
> Linux New Jersey: Open Source Solutions for New Jersey
> http://www.linuxnj.com
>
>
>
> _______________________________________________
> talk mailing list
> talk at lists.nyphp.org
> http://lists.nyphp.org/mailman/listinfo/talk