* Matching text from HTTP?
@ 2004-03-13 14:35 Mihael Kukec
2004-03-13 15:54 ` Antony Stone
0 siblings, 1 reply; 2+ messages in thread
From: Mihael Kukec @ 2004-03-13 14:35 UTC (permalink / raw)
To: netfilter
Is that possible? Matching text from HTTP? And possibly changing it?
For example, change every occurrence of ABC with *** ?
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Matching text from HTTP?
2004-03-13 14:35 Matching text from HTTP? Mihael Kukec
@ 2004-03-13 15:54 ` Antony Stone
0 siblings, 0 replies; 2+ messages in thread
From: Antony Stone @ 2004-03-13 15:54 UTC (permalink / raw)
To: netfilter
On Saturday 13 March 2004 2:35 pm, Mihael Kukec wrote:
> Is that possible? Matching text from HTTP?
It is just about possible (with the string match), however it is not at all
recommended:
1. It will only match if the entire string is contained within one packet - if
the string you search for crosses packet boundaries, netfilter cannot match
it.
2. It can only search for plaintext strings, and an increasing amount of HTTP
content these days is compressed (gzipped, basically) during transmission.
> And possibly changing it?
No, netfilter cannot change the contents of a packet (only the contents of
certain headers).
> For example, change every occurrence of ABC with *** ?
Use Squid, or Apache as a proxy.
Antony.
--
There's no such thing as bad weather - only the wrong clothes.
- Billy Connolly
Please reply to the list;
please don't CC me.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-03-13 15:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-03-13 14:35 Matching text from HTTP? Mihael Kukec
2004-03-13 15:54 ` Antony Stone
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.