comp.security.firewalls archive
Re: Anti-spyware at the Gateway
Date: Tue Mar 14 2006 - 01:55:16 CET
"Sebastian Gottschalk" <seppi@seppig.de> wrote in message
news:47m5bbFge14uU1@news.dfncis.de...
> Somebody. wrote:
>>> In article <47lsq1Fgdp1iU1@news.dfncis.de>, seppi@seppig.de says...
>>>> Would you allow access to <http://www.nytimes.com/>?
>>
>> Yes, it falls within acceptable parameters at this location.
>
> Then you've already lost. About one year ago I and some other people
> already implemented a simple proof of concept about cookie/session-id
> data transfer over that site. With about 10 to 20 % bandwidth
> efficiency, you've got a nice tunnel.
>
> There your tunnel goes!
The fact that the site is allowed, and can be used to make a tunnel, doesn't
prove that I can' find and detect the tunnel.
Oh wait, I forgot, tunnels are impossible to detect. Never mind.
-Russ.
Received on Mon May 1 00:57:16 2006