Re: Question on Layer 7 filtering

Re: Question on Layer 7 filtering

[Aleksander]

Maxime Ducharme wrote:
> Sorry my question was not in the email,
> is there any equivalent for l7 filtering under iptables ?

Layer7 is for iptables.

iptables -t filter -A FORWARD -m layer7 --l7proto yourproto -j DROP

HTH,
	Alex

RE: Question on Layer 7 filtering

[Maxime Ducharme]

 

Sorry my question was not in the email,
is there any equivalent for l7 filtering under iptables ?

TIA

Maxime Ducharme


-----Message d'origine-----
De : netfilter-bounces@lists.netfilter.org
[mailto:netfilter-bounces@lists.netfilter.org] De la part de Maxime Ducharme
Envoyé : 7 septembre, 2006 16:34
À : netfilter@lists.netfilter.org
Objet : Question on Layer 7 filtering


Hello ppl

anyone have experience with http://l7-filter.sourceforge.net/ ?

We are currently looking for a way to add more security
with linux based solutions (Layer 7 filtering would be very nice)

We are ready to develop some parts if needed (i mean we dont want
to buy "all-set" linux solutions)

example of what we'd like to block :
- good ol' codered/nimba/slammer attacks
- sql injections
- XSS
- ...

TIA 
 
Maxime Ducharme

Re: Question on Layer 7 filtering

[Eray Aslan]

On Thu, September 7, 2006 11:34 pm, Maxime Ducharme wrote:
>
> Hello ppl
>
> anyone have experience with http://l7-filter.sourceforge.net/ ?
>
> We are currently looking for a way to add more security
> with linux based solutions (Layer 7 filtering would be very nice)
>
> We are ready to develop some parts if needed (i mean we dont want
> to buy "all-set" linux solutions)
[snip]

Works for us with both 2.6.16 and 2.6.17 kernels.  We use it for traffic
shaping, mainly for skype.

-- 
Eray

Question on Layer 7 filtering

[Maxime Ducharme]

Hello ppl

anyone have experience with http://l7-filter.sourceforge.net/ ?

We are currently looking for a way to add more security
with linux based solutions (Layer 7 filtering would be very nice)

We are ready to develop some parts if needed (i mean we dont want
to buy "all-set" linux solutions)

example of what we'd like to block :
- good ol' codered/nimba/slammer attacks
- sql injections
- XSS
- ...

TIA 
 
Maxime Ducharme