can pf block a string ? or better, to limit it ?

[claudiu vasadi]

@Peter Maxwell: kernel coding is too much for me

@Michael proto: nstreams ... reading about it

@Vlad Galu: STATEFUL TRACKING OPTIONS has nothing to do with "string
matching". I want to bock a particular string (ex: "test") and not filter by
S/SA or other tcp flags

@john: I was thinking about something similar


I will let you know once I finish reading and testing.

thx for your opinions and more are welcomed :)