PROXY is available from RED

[Guest]

[alex_t]

Hi
I have a problem. I'v noteced that proxy is available from RED interface, inspite of all restrictions on firewall.
Even if  I deny system access to port 8080 (proxy port), i see string
INPUTFW:ALLOW:2:l3    eth1    KEY_TCP     70.37.165.109    56118    ff:ff:14:00:03:00     193.85.. 8080
where 193.85.. is my red interface.
It's a big security breach. Does anybody have suggestions?

[alex_t]

and silence   

[bkarankar]

not sure,

but you can try this

create new access rules,
zone "any"
destination "give ur internet network IP"

deny this.

then u need to modify firewall rule
disable all access with firewall (if not required to bypass proxy) and only allow dns and ping/icmp
now, create another rule in firewall to block all incoming request on 8080, 3128 and 8080

let me know if you find any issue

[Alishba]

Dashquid
fatlossprofessional.co.uk
fatlossprofessional
mobilehelper
securetrip
whichpetcover
google
abc
facebook
craigslist

[alex_t]

2 bkarankar:
which firewall do you mean? outgoing traffic?
I've tried, but - same result, so proxy is available from RED.
But I've noticed, when I switch proxy on, system makes system rule in system access section GREEN->RED:8080 Allow.