content-based firewall

[Philip Reynolds]

dmitry surovtsev <dsurovtsev at yahoo.com> 18 lines of wisdom included:
> Is there any content-based firewall for FreeBSD, i.e.
> firewall with capability to analize the packet content
> (at application level) as it does CheckPoint and
> Cisco's PIX? Maybe SNORT?

I wrote a small application filter, for filtering application data
to/from SMTP servers using ipfw's divert socket (actually, I used
tee, so only a copy of the packet is sent to the divert socket).

What kind of complexity do you need?

Regards,
-- 
Philip Reynolds                      | RFC Networks Ltd.
philip.reynolds at rfc-networks.ie      | +353 (0)1 8832063
http://people.rfc-networks.ie/~phil  | www.rfc-networks.ie