Concepts / Firewalls

Firewalls

Forward proxy

Also called web proxy, squid, proxy server, CONNECT, http_proxy, application-level gateway, URL filter

A server that makes web requests on its users' behalf, and so can allow or refuse them by name and URL.

The client sends the proxy the full URL (GET http://site/path); the proxy decides and fetches it over a connection of its own, so the site sees the proxy's address. For HTTPS the client only asks for a tunnel, CONNECT site:443, and the rest is encrypted: the proxy can judge the name, not the path. It is a firewall only if the network's packet filter lets nothing else out.

See it on real machines

Learn it on real machines.

Every lab is a small network of real Linux machines in your browser. Start with a free account: Google or email, no card.

Open this lab