Re: Layer-7 HTTP Matching Module

[Kevin McConnell <kevymac@yahoo.com>]

--- Kirk Bauer <kirk@kaybee.org> wrote:
> I think I could do this with the 'string' module of
> iptables -- i.e.
> look for the string "Content-type: text/html" and
> set a TOS flag or a
> firewall mark.  The 'tc' command can then be used to
> give these packets
> higher priority.
> 
> But I think it might be nice to have a true layer 7
> matching module.
> You could do:
> 
> -m --content-type 'text/html' --host
> 'www.mydomain.com'
> 
> It seems that if the string matching module is
> possible, then this is
> also possible.  

I'm sure anything's possible if you can imagine it.

> 
> Does such a module exist or is it being developed? 
> If not, I may write
> one when I have time if other people think it would
> be useful.

I don't see one being developed at this time, but I
think it would be useful.

> Kirk Bauer <kirk@kaybee.org>
> http://linux.kaybee.org | www.autorpm.org |
> www.logwatch.org

btw, thanks for so many years of use of both of these
great tools.


=====
Kevin C. McConnell --RHCE-- <Red Hat Certified Engineer>

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com