web-apps proxy - how safe is it?

[lou1z]

i like it very much but am just wondering how safe it is to use? when you're chucking all your media files etc on one server, you certainly don't want unauthorised access.
i have port 80 on my pfsense firewall forwarded to it with appropriate rules and snort IDS rules for web services etc running.
a good 15 character password as well, but i still wonder?

so, can anybody answer the above question.... how safe is it to use externally? eg what risk of buffer overflows, etc

what would be really good for the web-apps proxy would be a very simple form of logging eg <user> on <ip> sucessfully connected to <app> via web-apps proxy & <user> at <ip> failed to connect to web-apps proxy

[cpg]

yeah, good point. bug please!

do the logs for that app not capture traffic?

also, why not use https, though.

[lou1z]

yes they do, but i think it would be much easier if you were presented with the last five logins or so parsed onto the proxy page itself so you could easily see at a glance.
yes, and maybe a https login as well.
this is the nearest that amahi has come to just serving it's app's etc up via the internet without vpn's etc
it's so simple to use but just needs that extra little bit which i'm sure will come in the end.