| |
| | Paranoid Penguin - Application Proxying with Zorp, Part I |
 | | A firewall, of course, is a computer or embedded hardware device that separates different networks from one another and regulates what traffic may pass between them. |
 | | Second, because the firewall is re-creating the client connection in its entirety and not merely propagating or trivially rewriting individual packets, the firewall is well positioned to examine the connection at the application layer. |
 | | This is not a given, however; if the firewall is, say, a SOCKS firewall and not a true application-layer proxy, it simply could copy the data payloads of the client connection packets into those of the new, proxied packets. |
| www.linuxjournal.com /node/7296/print (2369 words) |
|