Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] web server can't see out but others can see in



On Wed, 26 Sep 2012 14:10:20 -0500
Derek Martin <invalid at pizzashack.org> wrote:

> Agreed... though if the web server is the only service that's
> listening to external connections, or all the other listening services
> are blocked off by a firewall, again there's not much difference in
> risk, with the latter being a little weaker than the former (as your
> firewall may be buggy/broken).

Meh. I'm more concerned about hosting an exposed server in a virtual
guest on the private network. Ask Google about VMware and VirtualBox
guest privilege escalation advisories. The server should be in a DMZ
where it can't be used as a proxy against the internal network.

-- 
Rich P.



BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org