Application Layer Firewall

Peter_APIIT · 09-14-2015, 10:21 PM

Hi,

I need an application layer firewall besides the layer 2 stateful packet firewall.

I did google search but return me nothing. Perhaps some experience Linux user can give some opinion.

Any suggestion?

unSpawn · 09-16-2015, 12:59 AM

Quote:

Originally Posted by Peter_APIIT

I need an application layer firewall besides the layer 2 stateful packet firewall.

You mean next to the network (3) and transport (4) layers Netfilter operates on? OK, any specific application? Anything else to add?

Peter_APIIT · 09-16-2015, 02:04 AM

Quote:

Originally Posted by unSpawn

You mean next to the network (3) and transport (4) layers Netfilter operates on? OK, any specific application? Anything else to add?

I'm not looking for Layer 3 or Layer 4 stateful firewall because I'm currently using OpenBSD pf which is very good compare to iptables or new replacement nftables.

I'm looking for Layer 7 application firewall to block skype, gtalk, etc....

unSpawn · 09-20-2015, 03:09 AM

Quote:

Originally Posted by Peter_APIIT

I'm currently using OpenBSD pf

..then you're in the wrong forum, I'll move your thread.

Quote:

Originally Posted by Peter_APIIT

I'm looking for Layer 7 application firewall to block skype, gtalk, etc....

Only thing I know of is ipfw-classifyd.

astrogeek · 09-20-2015, 04:11 AM

This appears to be a duplicate of this thread, which also contains more information.

As noted in the other thread your requirements are for an intermediate router, not the end point where the application actually runs. Hence you cannot use a layer 7 application firewall because the application does not run on the router.

jeremy · 09-22-2015, 01:50 PM

Please post your thread in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place. This thread is being closed because it is a duplicate.