security & squid proxy...

[gmongardi at napc.com (Grant M.)]

dsr at tao.merseine.nu wrote:
> Except for the first feature, you need to explicitly configure
> and regularly maintain a squid cache to keep getting security
> benefits from it.

So, based upon your comments, simply requiring a squid reverse-proxy
offers no _real_ benefit (excluding caching, which is of little help in
this case) over a standard firewall, unless you explicitely create
rules/acls to limit access to just what the webserver behind the proxy
offers?
Let me know,
Grant M.
-- 
Grant Mongardi
Systems Engineer
NAPC

gmongardi at napc.com
http://www.napc.com/
781.894.3114 phone
781.894.3997 fax

NAPC | technology matters
>>>>>>>>>>>>>>>>>>>>>>>> Please make a note of our new HQ address as of
May 23rd: 307 Waverley Oaks Road  Waltham MA 02452