Slashdot Mirror


Coral P2P Cache Enters Public Beta

Eloquence writes "infoAnarchy reports that Coral, a peer-to-peer webcaching system, has gone into public beta. Currently the Coral node network is hosted on Planet-Lab, a large scale distributed research network of 400 servers. You can use Coral right now by appending "nyud.net:8090" to a hostname. View Slashdot through Coral. Is this the end of the Slashdot effect?"

53 of 254 comments (clear)

  1. Slashdotted already by Rexz · · Score: 5, Funny

    Just kidding.

    1. Re:Slashdotted already by jelevy01 · · Score: 2, Funny

      > Just kidding.
      yea, but its true :)

    2. Re:Slashdotted already by Anonymous Coward · · Score: 2, Informative
      No, it really is down, at least from here:

      Windows:
      C:\>ping slashdot.org.nyud.net
      Ping request could not find host slashdot.org.nyud.net. Please check the name and try again.
      Linux:
      ~$ping slashdot.org.nyud.net
      ping: unknown host slashdot.org.nyud.net

      ~$dig slashdot.org.nyud.net
      ; <<>> DiG 9.2.1 <<>> slashdot.org.nyud.net
      ;; global options: printcmd
      ;; connection timed out; no servers could be reached
      Seems their nameservers have some kind of problem. I am in the Midwest, going through an AT&T OC3 (everything else works fine from here; it's not a local problem). It works OK when I check from our California-based servers that peer with Mae West, however.
  2. Google by asd-Strom · · Score: 3, Informative

    Google cache has been a good helper to me for some time.
    So this is not so new to me regarding slashdot effects.

    1. Re:Google by Dreadlord · · Score: 2, Insightful

      Google doesn't covert links in the cached page, you need to dig out cache of every page you want to visit.

      And you can't be sure that Google has cached your page in the first place.

      --
      The IT section color scheme sucks.
    2. Re:Google by Gherald · · Score: 2, Informative

      >Are you saying with Coral that you can?

      With Coral you can get it cached just by asking for it. Of course, the Coral pcs have to connect to it at least once.

      You cannot get google to cache a page at your request -- no matter how hard you try :)

    3. Re:Google by bogie · · Score: 4, Informative

      Google cache tip for you. There is a bookmarklet for Firefox where you simply click the bookmarklet and Google's cache of the page opens up. Its a nice feature to have at your fingertips. You can get the code at the very bottom of the following page, just drag it to your personal toolbar.

      http://www.rentzsch.com/notes/googleCacheHacking

      If the page won't load at all thus negating the above just use the following example to load a page.

      http://google.com/search?q=cache:www.slashdot.or g

      --
      If you wanna get rich, you know that payback is a bitch
    4. Re:Google by doofsmack · · Score: 5, Informative

      Talking about bookmarklets, I just wrote a quick little bookmarklet to redirect you to the Coral cache of the current page. Here it is:

      javascript:location.href=location.href.replace(/ht tp\:\/\/([a-zA-Z\.]+)\/(.*)/, "http://$1.nyud.net:8090/$2");void(0)

      And if slashdot's tendency to insert spaces in long strings screws that up, try grabbing it from here

  3. Anyone see the irony? by bigberk · · Score: 4, Funny

    Of, well, slashdoting the solution to slashdotting? Really cool idea though. Nice!

  4. Dear Lord by over_exposed · · Score: 4, Funny

    I hope this isn't the end of the /. effect! What would we do w/o webservers crashing under tremendous loads?!? WE NEED the /. effect! I hope this technology crashes and burns...

    Then again it might not be so bad....

    --
    "The object of war is not to die for your country, but to make the other bastard die for his." - Patton
  5. self-referential slashdotting by Shaheen · · Score: 5, Funny

    so it's like this... people click on a link on slashdot, which gets farmed out to the p2p network to get the cached copy, but there's so many people clicking the link to get the cached copy that they are only slashdotting their own computers since they are all part of the p2p network too! now we can all collectively feel the slashdot effect!

    oh, first post?

    --
    You should never take life too seriously - You'll never get out of it alive.
  6. files by Coneasfast · · Score: 2, Interesting

    you can ensure that your readers can still access a certain web page or files, when the multitude of readers would otherwise overload the website and make the content unavailable.

    well apparently all html content, including files, will be cached. this is a great way to get around downloading from snail-pace sites, (although i will be checking md5sums)

    --
    Marge, get me your address book, 4 beers, and my conversation hat.
  7. Not too good for websites by chrispyman · · Score: 3, Insightful

    While their system would be pretty good (supposing it can withstand a slashdotting) for cacheing large files, it's not very useful for websites. Websites usually have lots of additional images, links, and whatnot, and as is currently, the system doesn't rewrite URLs.

    1. Re:Not too good for websites by Coneasfast · · Score: 4, Informative

      links should be (and usually are) relative, eg:

      img src="img/logo.png"
      not:
      img src="http://slashdot.org/img/logo.png"

      or whatever so this shouldn't be a problem

      --
      Marge, get me your address book, 4 beers, and my conversation hat.
  8. In case Coral gets slashdotted by Rushuru · · Score: 5, Funny

    In case Coral gets slashdotted, use this mirror to view slashdot

    --
    !
    ^_^
    1. Re:In case Coral gets slashdotted by aixou · · Score: 2, Interesting

      It might sound better if you wrote " moddo appu onegai". The pronoun "me" made it sound awkward to me. It would sound fine in English without the pronoun (e.g. "mod up please"), and since the Japanese dislike pronouns in the first place, you might as well take it out. Plus, without the pronoun it sounds like more traditional katakana usage rather than forced English.

      I'm not a native speaker though, so ymmv. :)

  9. Hosting companies'll hate this.... by rsilvergun · · Score: 3, Interesting

    as will ISPs if it takes off. Right now with bandwidth usage centralized it's pretty easy to bill for it. If you decentralize it with p2p via millions of always on unmetered clients/servers it gets hard, if not impossible. I kinda hope it doesn't take off, since if it does it could end unmetered Internet access...

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
    1. Re:Hosting companies'll hate this.... by interiot · · Score: 2, Informative
      Erm? If you mean the "5mb webspace" places, no, they don't charge for bandwidth. They just cancel your account if you post porn or anything else that will get heavily downloaded.

      As far as I know, anybody in the 0.5gig/month or over (all the way up to the backbone carrierers, which have to have peering agreements as an exception to the rule of charging for bandwidth) charges per megabyte.

  10. Also a proxy... by jelevy01 · · Score: 4, Interesting

    This would also by pass any restricted sites your company may be blocking...

    1. Re:Also a proxy... by interiot · · Score: 4, Informative
      There are actually a lot of sites out there that will let you access arbitrary content from elsewhere. Most corporate restricting proxies will block at least some of them (but it's impossible to get all of them). So something that could be as high-profile as Coral is less useful compared to some of the more obtuse of these:
      • google cache (this has been periodically blocked at my company)
      • the internet archive
      • online translation sites (eg. if it's an english site, have the translator go from japanese to english... none of the words will be recognized as japanese, so it will pass them all as-is)
      • several others I'm forgetting at the moment...
    2. Re:Also a proxy... by DMUTPeregrine · · Score: 2, Interesting

      atomintersoft.com maintains a proxy list.

      --
      Not a sentence!
  11. me thinks not P2P by rob101 · · Score: 2, Interesting

    This is a Content Distributon network of cooperating servers colloborating to exchange information and 'level out' excess demand by distributing reqiests among n servers. Like Akamai's EdgeSuite. based on a quick read of the front page. The providors of content in their network are never the consumers if content. thus i don't know why they call it peer-to-peer? anyone?

    1. Re:me thinks not P2P by Inominate · · Score: 4, Informative

      It's not p2p.

      It's 'distributed'.

      Peer to peer implies that the users of the service are the ones supporting it's existance.

  12. Seems to be broken by isny · · Score: 2, Interesting

    Some reason, this works but this doesn't... guess there are limits to recursion. If for some reason the last link works, keep adding nyud.nets...
    It's turtles all the way down...

  13. What about Freecache? by SharpFang · · Score: 2, Informative

    http://www.archive.org/web/freecache.php

    It isn't P2P web proxy, it's just "big pipe"-based distributed one. Supposedly a great way to prevent slashdoting (just use http://freecache.org/http://mytinysite.com instead of http://mytinysite.com and everything goes from the cache, tiny site receiving only header requests to chceck if the document hasn't changed in the meantime) it's hardly known, way too quiet as for a project that useful. P2P may be faster and cheaper but certainly less reliable...

    --
    45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
  14. Only the top page? by News+for+nerds · · Score: 4, Interesting

    http://slashdot.org.nyud.net:8090/ caches only the /. homepage. Doesn't it analyze hyperlinks?

    1. Re:Only the top page? by mothz · · Score: 4, Informative

      Doesn't it analyze hyperlinks?

      All the links on Slashdot have the format
      <a href="//slashdot.org/blahblahblah">
      so that they will always link back to Slashdot. Most websites just use "blahblahblah" or "/blahblahblah" for their links. For example, links on google.com.nyud.net are fully functional.

    2. Re:Only the top page? by SirDaShadow · · Score: 2, Informative

      so that they will always link back to Slashdot. Most websites just use "blahblahblah" or "/blahblahblah" for their links. For example, links on

      Well...all they have to do is have some modifying code like CGI-Proxy does....

  15. Is it possible to combine this with bittorrent by Danathar · · Score: 2, Insightful

    Many times it seems a bittorrent tracker is down due to bandwidth issues. If I "corralized" it...could this alleiviate the problem?

    1. Re:Is it possible to combine this with bittorrent by sploo22 · · Score: 3, Insightful

      The whole point of a tracker is that it's updated constantly with which chunks each person has available. A cache, by definition, doesn't interact with the original site so you couldn't send your own information. Nobody would know to download chunks from you, and therefore their software would be less likely to send you chunks.

      You could conceivably design a distributed tracker, but this isn't it. Anyway, there would doubtless be synchronization issues that would greatly decrease the network's overall performance.

      --
      Karma: Segmentation fault (tried to dereference a null post)
  16. Re:Usefulness by chewy_2000 · · Score: 2, Informative
    Looks like it. Haven't tried it personally yet, but I will.

    Here.

  17. Stats! Slashdot has it REALLY working! by Danathar · · Score: 4, Informative

    http://www.scs.cs.nyu.edu/coral/stats/

  18. Work for CmdrTaco by Dreadlord · · Score: 5, Interesting

    Goatse-links trolls will be back, with slashcode showing the same domain for every link, I think CmdrTaco has some work to do now.

    --
    The IT section color scheme sucks.
  19. Stupid story submitter... :-) by Jugalator · · Score: 4, Funny

    To save their bandwidth, you should've linked to their mirror!
    http://www.nyud.net.nyud.net:8090

    --
    Beware: In C++, your friends can see your privates!
    1. Re:Stupid story submitter... :-) by interiot · · Score: 5, Funny
      In fact, it lets you specify port numbers as well, so you can use the mirror-of-the-mirror too:

      http://www.nyud.net.nyud.net.8090.nyud.net:8090/

      Or the mirror-of-the-mirror-of-the-mirror:

      http://www.nyud.net.nyud.net.8090.nyud.net.8090.ny ud.net:8090/

      They should have posted THAT link to slashdot to see how well the system faired.

  20. It will fail, because business will want it to. by CFD339 · · Score: 2, Insightful

    This system fails because most commercial sites, and many others, will lose the ability to track web usage for site tuning and marketing response. Sites will be built -- if need be -- with specific settings or configurations to confound the coralling of their pages.

    Its a noble goal, but ultimately will go the way of the video phone -- which apart from conferences planned in advance, remains a novelty dispite perfectly adaquate technology -- nobody wants a suprise video call because nobody wants to be a 50's housewife who's self esteem is tied to the cleanliness of their floors and their ability to have perfect hair and a matching necklace and top all the time "in case someone calls".

    If people don't want it, it will fail regardless of how well done.

    --

    --
    The problem with quotes on the internet, is that nobody bothers to check their veracity. -- Abraham Lincoln
  21. "Invalid domain name in packet" by Anonymous Coward · · Score: 5, Informative
    It really DOESN'T work for a lot of people.

    The problem is that it doesn't seem to be compatible with Microsoft DNS severs. Below is a copy of the DNS log when I issue a query here, on my LAN which has a Microsoft DNS server running on Windows 2000, which then forwards through the University of Wisconsin. You can see that at the end it says "The DNS server encountered an invalid domain name." Perhaps someone who knows more about DNS can tell where the problem is?

    Rcv 10.76.0.2 0004 Q [0001 D NOERROR] (8)slashdot(3)org(4)nyud(3)net(0)
    UDP question info at 014D5A0C
    Socket = 384
    Remote addr 10.76.0.2, port 1263
    Time Query=4338128, Queued=0, Expire=0
    Buf length = 0x0200 (512)
    Msg length = 0x0027 (39)
    Message:
    XID 0x0004
    Flags 0x0100 QR 0 (question) OPCODE 0 (QUERY) AA 0 TC 0 RD 1 RA 0 Z 0 RCODE 0 (NOERROR)
    QCOUNT 0x1 ACOUNT 0x0 NSCOUNT 0x0 ARCOUNT 0x0
    Offset = 0x000c, RR count = 0
    Name "(8)slashdot(3)org(4)nyud(3)net(0)"
    QTYPE A (1)
    QCLASS 1
    ANSWER SECTION:
    AUTHORITY SECTION:
    ADDITIONAL SECTION:

    Snd 144.92.254.254 39b0 Q [0001 D NOERROR] (8)slashdot(3)org(4)nyud(3)net(0)
    UDP question info at 0109200C
    Socket = 408
    Remote addr 144.92.254.254, port 53
    Time Query=0, Queued=0, Expire=0
    Buf length = 0x0200 (512)
    Msg length = 0x0027 (39)
    Message:
    XID 0x39b0
    Flags 0x0100 QR 0 (question) OPCODE 0 (QUERY) AA 0 TC 0 RD 1 RA 0 Z 0 RCODE 0 (NOERROR)
    QCOUNT 0x1 ACOUNT 0x0 NSCOUNT 0x0 ARCOUNT 0x0
    Offset = 0x000c, RR count = 0
    Name "(8)slashdot(3)org(4)nyud(3)net(0)"
    QTYPE A (1)
    QCLASS 1
    ANSWER SECTION:
    AUTHORITY SECTION:
    ADDITIONAL SECTION:

    Rcv 144.92.254.254 39b0 R Q [8081 DR NOERROR] (8)slashdot(3)org(4)nyud(3)net(0)
    UDP response info at 012DB8AC
    Socket = 408
    Remote addr 144.92.254.254, port 53
    Time Query=4338128, Queued=0, Expire=0
    Buf length = 0x0200 (512)
    Msg length = 0x00e0 (224)
    Message:
    XID 0x39b0
    Flags 0x8180 QR 1 (response) OPCODE 0 (QUERY) AA 0 TC 0 RD 1 RA 1 Z 0 RCODE 0 (NOERROR)
    QCOUNT 0x1 ACOUNT 0x4 NSCOUNT 0x2 ARCOUNT 0x2
    Offset = 0x000c, RR count = 0
    Name "(8)slashdot(3)org(4)nyud(3)net(0)"
    QTYPE A (1)
    QCLASS 1
    ANSWER SECTION:
    Offset = 0x0027, RR count = 0
    Name "[C019](4)nyud(3)net(0)"
    TYPE 39 (39) CLASS 1 TTL 1333 DLEN 25
    DATA Unknown resource record type 39 at 012DBC41.
    Offset = 0x004c, RR count = 1
    Name "[C00C](8)slashdot(3)org(4)nyud(3)net(0)"
    TYPE CNAME (5)
    CLASS 1 TTL 0 DLEN 15
    DATA (8)slashdot(3)org[C033](4)http(2)l2(2)l1(2)l0(5)n yucd(3)net(0)
    Offset = 0x0067, RR count = 2
    Name "[C058](8)slashdot(3)org[C033](4)http(2)l2(2)l1(2) l0(5)nyucd(3)net(0)"
    TYPE CNAME (5)
    CLASS 1 TTL 1335 DLEN 2
    DATA [C033](4)http(2)l2(2)l1(2)l0(5)nyucd(3)net(0)
    &am p;n bsp; Offset = 0x0075, RR count = 3
    Name "[C033](4)http(2)l2(2)l1(2)l0(5)nyucd(3)net(0)"
    TYPE A (1)
    CLASS 1 TTL 60 DLEN 4
    DATA 139.91.70.71
    AUTHORITY SECTION:
    Offset = 0x0085, RR count = 0
    Name "[C038](2)l2(2)l1(2)l0(5)nyucd(3)net(0)"
    TYPE NS (2)
    CLASS 1 TTL 1991 DLEN 19
    DATA (3)139(2)91(2)70(2)71(3)ip4[C041](5)nyucd(3)net(0 )
    Offset = 0x00a4, RR count = 1
    Name "[C038](2)l2(2)l1(2)l0(5)nyucd(3)net(0)"
    TYPE NS (2)
    CLASS 1 TTL 1991 DLEN 16
    DATA (3)141(3)213(1)4(3)202[C09E](3)ip4[C041](5)nyucd( 3)net(0)
    ADDITIONAL SECTION:
    Offset = 0x00c0, RR count = 0
    Name "[C091](3)139(2)91(2)70(2)71(3)ip4[C041](5)nyucd(3 )net(0)"
    TYPE A (1)
    CLASS 1 TTL 603196 DLEN 4
    DATA

    1. Re:"Invalid domain name in packet" by mfreed · · Score: 5, Informative
      It appears that the Windows 2000 DNS server you are using is not aware of DNAME records (RFC 2672):

      Name "[C019](4)nyud(3)net(0)"
      TYPE 39 (39) CLASS 1 TTL 1333 DLEN 25
      DATA Unknown resource record type 39 at 012DBC41.
      We use these types of records to aid in redirecting resolvers to nearby Coral proxies (by mapping nyud.net to a "hierarchical" name http.l2.l1.l0.nyucd.net. The goal is that once you find a "nearby" server, you should remain nearby.

      Given that the DNAME RFC is from 1999, it appears that some old DNS servers do not handle this record type well. We'll look into some alternatives or work-arounds. (Perhaps you can contact me directly to see if subsequent changes can fix your problem.)

      Thanks for the detailed report!
      --mike

  22. Oooh! Graphs! by shish · · Score: 2, Funny

    Pretty picture :)

    http://www.scs.cs.nyu.edu/coral/stats/

    Doesn't give a usable time scale though; it has "HTTP requests", but not "per second" / "per minute" or anything :(

    --
    I mod down anyone who says "I will be modded down for this", regardless of the rest of their comment
  23. Definitely interesting idea... by Stephonovich · · Score: 2, Interesting
    [subject]

    Although I agree with others, it doesn't really compare to FreeCache. I still wonder why that never got much attention. It's an insanely great idea. Ah well. Between that, Corla, and BitTorrent, you never have to worry about /.'ing again when you submit your tiny personal site.

    In other news (for the morons who continue posting and whining), you can still remove the it prefix from the /. URL, removing the fugly colour scheme. And there was much rejoicing in the land.

    (-:Stephonovich:-)

    --
    "Who needs reincarnation when we've got parallel universes?" -Me
  24. Not a good solution by pyrrhonist · · Score: 2, Informative
    From the FAQ:
    What files are being served by FreeCache?

    FreeCache can only serve files that are on a web site. If the link to a file on that web site goes away, so will the file in the FreeCaches. Also, there is a minimum size requirement. We don't bother with files smaller than 5MB, as the saved bandwidth does not outweight the protocol overhead in those cases.

    --
    Show me on the doll where his noodly appendage touched you.
  25. Google doesn't cache images by enosys · · Score: 2, Insightful
    Google doesn't cache images. Those are often the largest parts of the page. Also some browsers might not display the page at all if they can't load some images.

    Plus as others have said Google doesn't convert links.

  26. Hmmm... wondering if I could use this commercially by digidave · · Score: 2, Interesting

    I haven't checked the terms of use to see if I'm allowed to use this for my work web site, though maybe with a cash or hardware donation, or by running a high-bandwidth node, I can get permission.

    What I'm thinking is that at work I run a multi-server site that gets massively bogged down for short periods when it tries to handle upwards of 35,000 concurrent sessions. Bandwidth is not the problem, the application is, and it can't be rewritten for reasons that piss me off and I have no budget for more servers and no management support to run a static cached version of the site.

    So I was wondering if it was possible to have the site automatically direct visitors to the Coralized URL when the site load gets too high. Either a manual change or an automatic one would be ok. I have some ideas on how this could be done using a failover server config on our ServerIron. Possibly a router config can also do this, though we don't run our own router since it's at a colocation facility. Worst case scenario is I can edit the home page to redirect to Coral when the load gets high.

    Are there any other Slashdotters looking to use Coral in similar ways? If you have any ideas to share I'd be all ears.

    --
    The global economy is a great thing until you feel it locally.
  27. Upload bandwidth by rsilvergun · · Score: 2, Insightful

    imagine if we all used our max upload bandwidth 24/hrs a day. ISP would need to modify their networks to work around this. At least I assume they would. As it is, many 'unmetered' isps will start sending you nastygrams if you make heavy use of your upload bandwidth, but otherwise look the other way when you run a server. Keep in mind that all these p2p apps violate most IPS' TOS (mine doesn't let you run a server of any kind, and while there are places where enforcement of that would be silly, there's still plenty of room for a crack down).

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
  28. Re:Incompatible with logged in browsing by maskedbishounen · · Score: 5, Informative

    Sounds like we need a little lesson on How cookies work.

    To summarize it, though, they're set on a per-domain basis.

    www.apple.com can set a cookie.
    store.apple.com can set a cookie.

    The two cannot interact with each other; however, .apple.com can interact with any Apple subdomain.

    microsoft.com cannot access any of your apple.com cookies.

    Thus, nyud.net cannot access your /., or any other cookies.

    --
    "An infinite number of monkeys typing into GNU emacs would never make a good program."
  29. Re:Is this the solution? by focitrixilous+P · · Score: 2, Informative
    Bittorrent is your friend. It's as common as AIM or IRC these days, instead of pulling the whole file from a central server, only the first few need to use a server host, and everyone else shares with each other. Most big linux distros do it with 650 MB files, or for large video files. No reason it wouldn't work for you.

    Here, I'll even link you to a good client that will give you a nice GUI for starting out. Another Bittorent Client for all OSes.

    --
    SAILING MISHAP
  30. Not quite, but here is what /. looks like! by Tailhook · · Score: 2, Informative

    Check out their logs...

    Coral Statistics

    ...note the recent blip?

    --
    Maw! Fire up the karma burner!
    1. Re:Not quite, but here is what /. looks like! by rjch · · Score: 2, Insightful

      Too right I did. It's a fourfold increase in average traffic and anything up to a 30-fold increase in peak traffic. I'm also only looking at the initial blast of traffic (hence the use of the word "instant") which is not as high.

  31. Re:Possible problems with this scheme... by geminidomino · · Score: 2, Informative

    I have to believe that ISPs that provide web services would find their revenue reduced since they would not see all the hits on the site.

    It seems you're confusing a "cache" with a "proxy." A "cache" is only DESIGNED to work on static pages, and it doesn't hit the page more than once (barring refreshing). That's what "cache" means. The pages are stored on the cache server and fed to the clients as they get requested, cutting down on hits to the actual site.

  32. Re:What would make it p2p by rob101 · · Score: 2, Informative

    The above link from an anonymous coward points to a paper through some weird obfuscation that does just that. HTTP(P2P)

  33. Hackable? by arth1 · · Score: 2, Interesting

    The practice of allowing portnumbers seems dangerous. I can imagine links like http://localhost.19.nyud.net:8090/ or http://loghost.515.nyud.net:8090/ being used for nefarious purposes.

    Regards,
    --
    *Art

    1. Re:Hackable? by arth1 · · Score: 2, Interesting

      Yep, accessing http://localhost.22.nyud.net:8090/ returned:

      SSH-1.99-OpenSSH_3.5p1 via: SSH-1.99-OpenSSH_3.5p1 216.165.109.81:8090 (CoralWebPrx/0.1 (See http://www.scs.cs.nyu.edu/coral/))
      accept-ranges: none
      connection: close


      That definitely doesn't look too good, security-wise, when you can get access to inside services through their proxy.

      Regards,
      --
      *Art

    2. Re:Hackable? by arth1 · · Score: 2, Insightful
      Okay. Apparently localhost is now blocked, at least it didn't give me the reply you guys got.

      That's the Microsoft way of securing things -- blocking single exploits as they are found. That doesn't solve the design problem of the proxy being able to contact any host/port, including LAN ones. Just substitute localhost with any host of choice, or even broadcast addresses.

      This product needs a design change.

      --
      *Art