string matching in kernel 2.6
Ming-Ching Tiew
mingching.tiew at redtone.com
Mon Jul 25 05:33:44 CEST 2005
>
> From: "Jan Engelhardt" <jengelh at linux01.gwdg.de>
> >
> > If neither works, you can try abusing ipt_layer7 ;-)
> > See http://l7-filter.sf.net/
> >
>
I had a quick look at the source of ipt_layer7, it's linearising
the skb so that the pattern can be matched. For ipp2p, it simply
skip the non-linear skb (and it has been accepted into pom-ng).
So I think it should be quite easy if one wants to also handle
the non-linear case, ie just linearise the skb. Not efficient, but
it should work. Right ?
Cheers.
More information about the netfilter
mailing list