Hello, this is the first time that I write here.
At the first place, I would like to say that I am very thankful to his
author for the work that he has well done. ( Perphaps my english is some
bad :S ).
The subject of this mail is that I would like if Pound is capable of:
- If any X_SSL header arrives to Pound from a external source ( an
attacker ) is dropped , in other words, Is Pound capable of detect this
type of attack ? Or
it passes this headers to the server into the intranet ? Which are the
options to enable this action ( deny any X_SSL head and request a
certificate ) ?
- I would like to know if Pound can be request a couple of
certificates, ( I want to authenticate the machine and the user that is
connected from ) .
- Finally, I would like to know if Pound adds any header with its IP
to rest of headers , I want to control where X_SSL heads comes from to
prevent any attack.
Thanks.
|
