Re: Statefull SOCKS filter

[Allen Francom <aef@prismnet.com>]

Once upon a time I interacted with a project called "Hogwash".

This was all layer 2 and seemed to be off to a great start.

Sounds more like what you need, "transparent".

The maintainer resigned, however the code ran, based on
Snort and associated libraries.

With a lot of help from others, I made a binding
for these rules into IPTables via the QUEUE target... but
that wasn't all that clean.  Maybe skip the IPTables
entirely, and "do like hogwash did".

2 cents...

On Thu, 9 Mar 2006, Peter Christensen wrote:
> I'm currently in the development of a transparent firewall bridge, whose sole 
> purpose is to filter our everything but LAN traffic and traffic for a list of 
> privileged servers on the Internet. Since it is meant to work on an bunch of 
> different network configurations out-of-box, it must be able to detect and 
> filter proxy traffic as well.