firewall
Click on the red underlined text to get to the source
... paramount, even at the expense of breaking the end-to-end paradigm.
One example of this is the Firewall - a device to prevent outsiders
from unauthorized access into a corporation. Our new protocol ...
... unauthorized access into a corporation. Our new protocol, the
Firewall Enhancement Protocol (FEP), is designed to restore the end-
to-end model while maintaining the level of security created ...
... create an artifact, use it, and send it to their
friends. If it turns out to be a good idea these friends can adopt
it and maybe make it better. Now enter the Firewall: if Mark happens
to work at a company that installs a Firewall ...
... Firewall: if Mark happens
to work at a company that installs a Firewall, he can't experiment
with his friend Scott. Innovation is more difficult, maybe
impossible. What business is it of an IT manager if Scott and Mark
...
...
Firewalls are important, and we do respect the right of anybody to
protecting themselves any way they want (as long as others are not
inconvenienced). Firewalls ...
... Firewalls are important, and we do respect the right of anybody to
protecting themselves any way they want (as long as others are not
inconvenienced). Firewalls work, and have a place in the Internet.
However, Firewalls ...
... Firewalls work, and have a place in the Internet.
However, Firewalls are built to protect from external threats, not
internal ones. Our proposed protocol does not break the security
model of the Firewall ...
... Firewalls are built to protect from external threats, not
internal ones. Our proposed protocol does not break the security
model of the Firewall; it still protects against all external risks
that a particular Firewall can protect against. For our protocol to
...
... security
model of the Firewall; it still protects against all external risks
that a particular Firewall can protect against. For our protocol to
work someone inside the Firewall must run an application level
...
... that a particular Firewall can protect against. For our protocol to
work someone inside the Firewall must run an application level
protocol that can access TCP port 80. Our concept allows a
...
... consistent level of security while bypassing the IT manager in charge
of the Firewall. We offer freedom to innovate without additionally
compromising external security, and the best part, no need to waste
...
... HTTP specifically because it can bypass Firewall barriers. This
piecemeal deployment of specific applications is not an efficient way
...
... deployment of specific applications is not an efficient way
to meet the challenge to innovation created by Firewalls. We decided
to develop a process by which TCP/IP itself is carried over HTTP ...
... TCP/IP application
immediately without having to go through the laborious process of
dealing with Firewall access for the particular application. An
unintended byproduct of this proposal is that existing TCP/IP
...
... high level view of our protocol. The application
(1) in host A (outside the Firewall) sends a TCP/IP datagram to host ...
... host's B protocol stack (6). This packet is routed to
the application on host B (7), as if the Firewall (8) never existed.
...
... packet is sent as either a HTTP GET request or a response to a GET
request. This flexibility work well with firewalls that try to
verify valid HTTP ...
... verify valid HTTP commands crossing the Firewall stopping the
unwanted intercepting of FEP packets.
...
... form, to be used when the domain name itself might be blocked by a
firewall programmed to protect the innocence of the corporate
users, is an ASCII string representing the dotted quad form of the
...
... form, to be used when the domain name itself might be blocked by a
Firewall programmed to protect the innocence of the corporate
users, is an ASCII string representing any one of the legitimate
...
...
Since this protocol deals with Firewalls there are no real security
considerations.
...
...
We wish to thank the many Firewall vendors who have supported our
work to re-enable the innovation that made the Internet ...
... Internet great,
without giving up the cellophane fig leaf of security that a Firewall
provides.
...