content-based firewall

[clemens fischer]

dmitry surovtsev <dsurovtsev at yahoo.com>:

>>I wrote a small application filter, for filtering 
>>application data
>>to/from SMTP servers using ipfw's divert socket 
>>(actually, I used
>>tee, so only a copy of the packet is sent to the 
>>divert socket).
>>
>>What kind of complexity do you need?
>
> Thanks for reply. I need to control all smtp, pop, and
> http traffic. Where can I get your application filter?
> Is it's source code available as well?

i am interested in this as well.  the only thing in this context i
remember are the accf_http(9) filters.  is the divert-filtering code
somewhere publicly accessable?

  clemens