RE: how we will program in the future

True, but the _minimum_ you would want to do is have a firewall that only
allowed port 80 connection (443 for ssl) from the outside. 

If you're more concerned, you'd add a reverse-proxy so only valid HTTP
commands flowed. 

And if you're really good you'd add a security appliance that looked at the
outbound html, knew what was valid as inbound responses to each individual
html page and validated the http inbound requests against that.

-Walden 


------------
Walden H Leverich III
President
Tech Software
(516) 627-3800 x11
(208) 692-3308 eFax
WaldenL@xxxxxxxxxxxxxxx
http://www.TechSoftInc.com 

Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)
 
-----Original Message-----
From: Booth Martin [mailto:Booth@xxxxxxxxxxxx] 
Sent: Monday, November 10, 2003 2:39 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: how we will program in the future

What am I missing here? How does one put a web server behind a firewall? I
thought the whole point of web serving was to be on the web? 
 
---------------------------------------------------------
Booth Martin http://www.MartinVT.com
Booth@xxxxxxxxxxxx
---------------------------------------------------------
 
-------Original Message-------
 
From: Midrange Systems Technical Discussion
Date: 11/10/2003 1:27:21 PM
To: Midrange Systems Technical Discussion
Subject: Re: how we will program in the future
 
Umm, I would have anyone's webserver behind a firewall, not jsut windows.
 
----- Original Message -----
From: "Booth Martin" <Booth@xxxxxxxxxxxx>
To: <midrange-l@xxxxxxxxxxxx>
Sent: Monday, November 10, 2003 1:54 PM
Subject: RE: how we will program in the future
 
 
> That is a good point Walden. By putting the proper non-Windows protections
> in front of the Windows servers the servers are generally immune.
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.