1998-02-06-16:57:26 James Croall:
>[...] and now AOL even supports connection to their network via this
>type of proxy. [...] and AOL's services can listen on port 443 now too.
I detect a common theme here --- sounds like you should stomp AOL's
netblocks flat at your external screening router, block all access to
'em.
I also don't let SSL through at all, and don't intend to until and
unless I can get a Man-In-The-Middle proxy for it, that can enforce the
same rules we apply to http: only a short list of acceptible MIME types,
and all applets get stripped out of it on the way through.
-Bennett
|
|