Jana Loopback Filter for Proxy Security

Thomas Hauck (the author of JanaServer) and I have written a small ISAPI filter plugin for the Jana proxy server.

Purpose of the filter is to enhance the security of Jana proxy installations. Therefore the filter has the following configurable features:

• blocks access to services running only locally (e.g. Jana monitor and administration, Windows file sharing) on the proxy through the proxy itself [recommended setting = 1]
  
• blocks access to Jana administration (if only bound to localhost) [recommended setting = 1]
  
• allows to restrict the host ports of the HTTP CONNECT method and therefore makes it harder to "tunnel" the proxy [recommended setting = 1, allowed port only 443]
  
• blocks Jana special actions (like /jana_mail or /jana_dail) [recommended setting = 0]
  
• blocks simple HTTP clients (e.g. telnet) that do not properly set the Host header field. [recommended setting=0]
  

This post has been edited 1 time(s), it was last edited by mikew on 13.10.2004 at 08:25.

Debugging JanaDomainFilter Extensions Under Visual Studio

Mike-

Thank you and Thomas for the work, now long ago, showing an ISAPI example. I want to debug some code changes made on top of your example. Is there a way to use the interactive Visual C++ debugging capabilities to debug JanaDomainFilter as it is called from Jana Server?

In debugging other callback routines, I have been successful at configuring VC++ to run the debugger on the mainline program which in turn calls the .DLL containing the routines of interest. In that configuration, I have been able to set breakpoints and trap execution in the .DLL code. When I tried that with Janad, the server would only run for a short time before shutting down ... And none of the .DLL breakpoints trapped. I also tried that approach with JanaAdmin, then using JanaAdmin to start the server ... And that too was not successful.

Would you please share some insight or Visual Studio project configuration information?

Thank you, in advance, Merry Christmas, and Happy New Year.

Regards,
Stephen

First Step: Ape Microsoft IIS

Here is reference to one way to debug an ISAPI .dll using Visual Studio and JanaServer. This reference from Microsoft tells how to accomplish ISAPI debugging with IIS:

http://support.microsoft.com/kb/183480

Hi 8787, Mike is not that often in the english forum, try to ask your question in the german forum. Dont matter about the language, the most of us are familiar with english.

I cant help with that, i do not use that filter.

greetings peter

Hi 8787, Thomas has responded in the german forum, you can tell him directly what your need is. Send him a PM, you can find him here at the top of the site at the team-button. Or you answer him in the german forum, it depends on you.

greetings peter