Undesirable SSL behavior

chemist · Cadet Joined: Apr 11, 2004 Posts: 2 Location: Australia

It seems that Naoko 4.5 does not pass SSL connects thru to the external proxy as a CONNECT but goes straight to the nominal target. Is this correct? If so, is there anything I can do to change this? It would obviously compromise the security of one's IP address.

cheers,
chemist

z12 · Sergeant Joined: Jul 17, 2002 Posts: 131 Location: USA

Hi chemist,

Try using the patched version of 4.5 and see if that fixes it. You can find a link to it in the sticky at the top of this forum.

HTH
Mike

Lepus · Trooper Joined: Mar 02, 2004 Posts: 15 Location: USA

Some things:

1) Are you sure the anon proxy you're using supports CONNECT? - not all do.
2) Are you sure you have your browser using proxo for secure sites?
3) Are you filtering SSL using the OpenSSL libs?

Also a warning - anymore anon proxies are not something to trust - leaking your IP to them may far worse than leaking it to a website. Many are installed on unwitting PCs by email viruses like netsky and bagle and controled by, let's just say, not so honest folks. I don't know if any can work like proxo and decrypt SSL, but I wouldn't put it past them.

chemist · Cadet Joined: Apr 11, 2004 Posts: 2 Location: Australia

On more mature reflection I have come to realise I was talking through my hat. Please accept my apologies.

chemist.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 616 pages served in previous 5 minutes. Page Rendered: 0.343 seconds.