Great Circle Associates Firewalls
(December 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Reverse DNS Map failure while using http-gw
From: Rick Murphy <rick @ tis . com>
Date: Sat, 14 Dec 1996 15:09:00 -0500
To: robw @ marineterminals . com (Robert Williams)
Cc: firewalls @ greatcircle . com, fwtk-users @ ex . tis . com

At 09:37 AM 12/13/96 -0700, Robert Williams wrote:
You've got to rephrase the question in order for it to make any sense. For
example, here's what I think you're saying:

"When I connect to a site that requires a proper DNS reverse map, I get
refused."
Ok, then there's *ONLY ONE POSSIBILITY* - your firewall has NO VALID DNS
REVERSE LOOKUP. Fix that.

Now, if what you're REALLY saying is:
"When I connect to a site that requires a *proper E-Mail address for the
anonymous password prompt*"
You've got a different problem that's basically a restriction in the old
http-gw - it sends a fixed password string. 2.0 sends "httpgw @
 hostname".

What confuses me about your question is this part:

>employing the gopher/ftp function of http-gw, I notice that all of the
>growing number of FTP sites requireing reverse DNS mapping fail to connect,
>leaving only a message similar to the following in my syslog:
>        Dec 10 00:00 myproxyhost authsrv[24559]: deny
>host=host.domain.com/<IP Address>
>
>ftp-gw works just fine on the same machine.

I don't understand where authsrv gets involved..
	-Rick



Follow-Ups:
Indexed By Date Previous: Firewall Penetration Testing Paper
From: Reto Haeni <reto @ seas . gwu . edu>
Next: RE: nslookup via the firewall
From: Rick Murphy <rick @ tis . com>
Indexed By Thread Previous: Reverse DNS Map failure while using http-gw
From: robw @ marineterminals . com (Robert Williams)
Next: Re: Reverse DNS Map failure while using http-gw
From: "Donald R. Guillot" <dguill @ communique . net>

Google
 
Search Internet Search www.greatcircle.com