// COMPLETE THREAD

Need SSL firewall

3 expanded posts · every known parent and child

NODE e168044dNeed SSL firewall shamrock@netcom.com (Lucky Green)Wed, 21 Feb 1996 12:01:22 +0800

-----BEGIN PGP SIGNED MESSAGE-----

I need firewall software, preferably for free and running on an x86, that
allows me to place an SSL webserver behind the firewall.

Any pointers?

TIA,

- -- Lucky Green <mailto:shamrock@netcom.com>
   PGP encrypted mail preferred.


- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBMSpFICoZzwIn1bdtAQF3YgGAnt2V+2sTgv7cHDu0k3HZ/664sFbYsu9V
4sWnsBNuJoMRVlG4RbxE/iERpu0nR6ZF
=kPCC
-----END PGP SIGNATURE-----

NODE 90f7e3ffRe: Need SSL firewall David Mazieres <dm@amsterdam.lcs.mit.edu>Sat, 24 Feb 1996 17:07:14 +0800

I recommend Darren Reed's IPfilter package, which comes with OpenBSD,
and installs easily on FreeBSD and NetBSD.  It also works with SunOS
and Solaris, and I think even more operating systems.  It is highly
configurable.  Blocking all incoming TCP connections except to a few
host/port pairs should be quite simple.

You can get it at ftp://coombs.anu.edu.au:/pub/net/firewall/ip-filter

David

NODE 91b9b666Re: Need SSL firewall Simon Spero <ses@tipper.oit.unc.edu>Tue, 20 Feb 96 20:47:19 PST

Can't you just run a dumb TCP relay? 

I used to have one somewhere, but I can't remember if I solarified it to 
run with multi-threading. I can try and dig it up, but it'd probably be 
faster for you to rewrite from scratch. I also have a ssl proxy for the 
client side which I wrote to demo the MITM attack, but that doesn't sound 
like what you need.

Simon

On Tue, 20 Feb 1996, Lucky Green wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> 
> I need firewall software, preferably for free and running on an x86, that
> allows me to place an SSL webserver behind the firewall.
> 
> Any pointers?
> 
> TIA,
> 
> - -- Lucky Green <mailto:shamrock@netcom.com>
>    PGP encrypted mail preferred.
> 
> 
> - ---
> [This message has been signed by an auto-signing service.  A valid signature
> means only that it has been received at the address corresponding to the
> signature and forwarded.]
> 
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.2
> Comment: Gratis auto-signing service
> 
> iQBFAwUBMSpFICoZzwIn1bdtAQF3YgGAnt2V+2sTgv7cHDu0k3HZ/664sFbYsu9V
> 4sWnsBNuJoMRVlG4RbxE/iERpu0nR6ZF
> =kPCC
> -----END PGP SIGNATURE-----
> 
> 

---
They say in  online country             So which side are you on boys
There is no middle way                  Which side are you on
You'll either be a Usenet man           Which side are you on boys
Or a thug for the CDA                   Which side are you on?
  National Union of Computer Operatives; Hackers, local 37   APL-CPIO