[e2e] Fwd: Camel's nose in the tent

Christian Huitema huitema at windows.microsoft.com
Mon Aug 13 15:08:30 PDT 2001


The business of filtering based on port numbers is rapidly getting
insane: blocking incoming 80, "transparent proxy" of outgoing 80,
blocking 25... I think we should rewrite the browsers and SMTP agents to
use alternate ports, picked more or less at random. In fact, we already
have the tools to do that with the SRV records. I can think of a
filter-breaker that will first try to access www.example.com:80, and if
that breaks for any reason, try to resolve "_http._tcp.www.example.com
IN SRV" -- et voila, alternate port number, filtering is defeated...
Same could work for mail, etc.

-- Christian Huitema



More information about the end2end-interest mailing list