String Match

Cesar listas at itm.net.br
Wed Nov 9 06:53:14 PST 2005


An interesting thing in iptables is that option to match strings, like this 
example:

iptables -A FORWARD -p TCP -m string --string "BitTorrent protocol" -j 
REJECT --reject-with tcp-reset
iptables -A FORWARD -p TCP -m string --string "GET /announce" -j 
REJECT --reject-with tcp-reset

Did anyone wrote a similar patch to ipfw? or ... Is this something desirable 
to ipfw which the developers will put in the future?

Thanks 



More information about the freebsd-ipfw mailing list