Stories
Slash Boxes
Comments

SoylentNews is people

Submission Preview

Link to Story

Firewall rules: not as secure as you think

Accepted submission by owl at 2024-08-30 00:41:07
Security
https://www.haskellforall.com/2024/08/firewall-rules-not-as-secure-as-you.html [haskellforall.com]

This post introduces some tricks for jailbreaking hosts behind “secure” enterprise firewalls in order to enable arbitrary inbound and outbound requests over any protocol. You’ll probably find the tricks outlined in the post useful if you need to deploy software in a hostile networking environment.

The motivation for these tricks is that you might be a vendor that sells software that runs in a customer’s datacenter (a.k.a. on-premises software), so your software has to run inside of a restricted network environment. You (the vendor) can ask the customer to open their firewall for your software to communicate with the outside world (e.g. your own datacenter or third party services), but customers will usually be reluctant to open their firewall more than necessary.


Original Submission