How Tag/Mark Up Media Packets?

Gergely CZUCZY phoemix at harmless.hu
Sat Aug 12 15:06:05 UTC 2006


On Sat, Aug 12, 2006 at 10:59:39AM -0400, beno wrote:
> Hi;
> Is it possible to define packets according to the media type (pdf, mp3)
> that they request/send?
that requires an application-level firewall. think of a keepalive HTTP request.
the items sent back are the following: the html page, 3 images, an mp3 music theme for
the site, 5 flash animations, and a pdf at last.
there are multiple contencts in a single connection. even a single tcp packet could
share two or more type of contents.
think of it...

pf itself is a packet-level firewall. any application-level extensions are in the
userland, like the ftp-proxy.

> Also, what does *ssh* mean here? I would have expected a macro or a port
> number:
> pass out on fxp0 from any to any port 22 queue ssh
ssh means 22/tcp, mostly. i would add proto tcp...


Bye,

Gergely Czuczy
mailto: gergely.czuczy at harmless.hu
PGP: http://phoemix.harmless.hu/phoemix.pgp

Weenies test. Geniuses solve problems that arise.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20060812/1edbbfd4/attachment.pgp


More information about the freebsd-pf mailing list