Firewall with deep inspection

Baltasar · 02-22-2004, 11:52 AM

Hi,

Is there a firewall which support the deep inspection technology, or how is it possible to make an application firewall with linux?

SirSlappy · 02-22-2004, 11:57 AM

wtf are you smoking, eh?

Baltasar · 02-22-2004, 05:47 PM

you could answer more friendly or keep your stupid comments for you!
just look for deep inspection in google and you get more information about it.

i talk about a firewall solution which inspect the http stream for weird things.
i mean iptables is just a port firewall (and a little bit more), but i want more control.
for example i want to disable the verify command in the smtp protocol or just publish some webs over ssl and not allow the hole ssl port and so on.
I hope that was now a little more understandable.

meks · 02-22-2004, 09:07 PM

hi there.

you probably want to read through http://l7-filter.sourceforge.net/
these people have built application layer filtering (thus l7).
they support regexp-patterns and guides for writing/modifying them.

afaik, they provide support for 55 protocols.

perhaps you should have a look at their project-page. its quite clear how l7-filtering works after reading through their documentation.
they are currently discussing with netfilter to be included within iptables and the linux stock kernel.