Hi,
I have one application that isn't working right now - Skype. I know it's a bit of a pain the way it works, but I'm trying to find a secure way to get it working without permitting unnecessary outbound access or running any more services than necessary.
I have heard tell that the SOCKS proxy basically allows all outgoing traffic - is that correct, or is there some way to run SOCKS so that I can restrict it to specific outgoing ports? If I can, and I allow 80 and 443 (which skype advise as a minimum for outgoing access) through SOCKS, this won't affect my transparent http/s proxy right - that will still proxy all "normal" http/s traffic (from client applications that don't know it's there and have no proxy configured)? What about client apps that have "auto detect proxy" - can I be sure they won't find the SOCKS and route their traffic through that instead? I don't want apps finding a way around the antivirus and other features of the http/s proxy unless they are explicitly configured to use the SOCKS proxy.
If SOCKS can't be restricted, what are my other options? Allowing all high ports out is not an option.
This thread was automatically locked due to age.
