Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 Nov 2005 11:52:35 -0300
From:      "Cesar" <listas@itm.net.br>
To:        <freebsd-ipfw@freebsd.org>
Subject:   String Match
Message-ID:  <002b01c5e53d$38c99d30$f2faa8c0@ironman>

next in thread | raw e-mail | index | archive | help
An interesting thing in iptables is that option to match strings, like this 
example:

iptables -A FORWARD -p TCP -m string --string "BitTorrent protocol" -j 
REJECT --reject-with tcp-reset
iptables -A FORWARD -p TCP -m string --string "GET /announce" -j 
REJECT --reject-with tcp-reset

Did anyone wrote a similar patch to ipfw? or ... Is this something desirable 
to ipfw which the developers will put in the future?

Thanks 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002b01c5e53d$38c99d30$f2faa8c0>