Re: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?
Emanuele Faranda <[email protected]> Wed, 24 Apr 2019 18:59:16 +0200
| Newsgroups | gmane.linux.ntop.general |
|---|---|
| Message-ID | <[email protected]> |
SGksCgpuRWRnZSBjYW4gcGVyZm9ybSBMNyBpbnNwZWN0aW9uIGFuZCBwb2xpY2luZywgcGxlYXNl IGNoZWNrIG91dCAKaHR0cHM6Ly93d3cubnRvcC5vcmcvcHJvZHVjdHMvdHJhZmZpYy1hbmFseXNp cy9udG9wbmctZWRnZSAuIEl0cyBjb3JlIApjb21wb25lbnRzIGFyZSB0aGUgbkRQSSBhbmQgbnRv cG5nLiBQbGVhc2Ugbm90ZSB0aGF0IHdlIG9ubHkgc3VwcG9ydCAKdWJ1bnR1IDE2IGFuZCB1YnVu dHUgMTggZm9yIG5FZGdlLgoKUmVnYXJkcywKCkVtYW51ZWxlCgpPbiA0LzI0LzE5IDU6MjcgUE0s IFR1cnJpdG9wc2lzIERvaHJuaWkgVGVvIEVuIE1pbmcgd3JvdGU6Cj4gR29vZCBldmVuaW5nIGZy b20gU2luZ2Fwb3JlLAo+Cj4gSXQgc2VlbXMgdGhhdCBJIGNhbiB1c2UgdGhlIG5kcGktbmV0Zmls dGVyIExpbnV4IEtlcm5lbCBtb2R1bGUgZnJvbSBIdW1iZXJ0byBKdWPDoSAoYmV0b2xqKSBmb3Ig REVFUCBQQUNLRVQgSU5TUEVDVElPTiBhdCBPU0kgTGF5ZXIgNy4gSSBmb3VuZCB0aGUgZm9sbG93 aW5nIGFydGljbGUuCj4KPiBBcnRpY2xlOiBJbnN0YWxsaW5nIGFuZCBDb25maWd1cmluZyBuZHBp LW5ldGZpbHRlciBmb3IgdHJhZmZpYyBjb250cm9sbGluZyBvbiB1YnVudHUKPiBEYXRlIFB1Ymxp c2hlZDogMjcgRmVicnVhcnkgMjAxNgo+IFVSTDogaHR0cDovL3RoaW5nc2lubGludXguYmxvZ3Nw b3QuY29tLzIwMTYvMDIvaW5zdGFsbGluZy1hbmQtY29uZmlndXJpbmctbmRwaS5odG1sCj4KPiBC dXQgY2FuIEkgdXNlIGl0IHdpdGggdGhlIGxhdGVzdCBMaW51eCBLZXJuZWwgNS4xLXJjNj8KPgo+ IFBsZWFzZSBhZHZpc2UuCj4KPiBUaGFuayB5b3UgdmVyeSBtdWNoLgo+Cj4gLS0tLS1CRUdJTiBF TUFJTCBTSUdOQVRVUkUtLS0tLQo+Cj4gVGhlIEdvc3BlbCBmb3IgYWxsIFRhcmdldGVkIEluZGl2 aWR1YWxzIChUSXMpOgo+Cj4gW1RoZSBOZXcgWW9yayBUaW1lc10gTWljcm93YXZlIFdlYXBvbnMg QXJlIFByaW1lIFN1c3BlY3QgaW4gSWxscyBvZgo+IFUuUy4gRW1iYXNzeSBXb3JrZXJzCj4KPiBM aW5rOiBodHRwczovL3d3dy5ueXRpbWVzLmNvbS8yMDE4LzA5LzAxL3NjaWVuY2Uvc29uaWMtYXR0 YWNrLWN1YmEtbWljcm93YXZlLmh0bWwKPgo+ICoqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqCj4KPiBTaW5nYXBvcmVhbiBNci4gVHVycml0b3BzaXMgRG9ocm5paSBUZW8gRW4gTWlu ZydzIEFjYWRlbWljCj4gUXVhbGlmaWNhdGlvbnMgYXMgYXQgMTQgRmViIDIwMTkKPgo+IFsxXSBo dHRwczovL3RkdGVtY2VydHMud29yZHByZXNzLmNvbS8KPgo+IFsyXSBodHRwczovL3RkdGVtY2Vy dHMuYmxvZ3Nwb3Quc2cvCj4KPiBbM10gaHR0cHM6Ly93d3cuc2NyaWJkLmNvbS91c2VyLzI3MDEy NTA0OS9UZW8tRW4tTWluZwo+Cj4gLS0tLS1FTkQgRU1BSUwgU0lHTkFUVVJFLS0tLS0KPgo+IC0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tCj4gRnJvbTogVHVycml0b3BzaXMgRG9ocm5paSBUZW8g RW4gTWluZyA8Y2VvQHRlby1lbi1taW5nLWNvcnAuY29tPgo+IFNlbnQ6IFdlZG5lc2RheSwgMjQg QXByaWwgMjAxOSAxMToyNCBQTQo+IFRvOiBudG9wQGxpc3RnYXRld2F5LnVuaXBpLml0Cj4gQ2M6 IFR1cnJpdG9wc2lzIERvaHJuaWkgVGVvIEVuIE1pbmcgPGNlb0B0ZW8tZW4tbWluZy1jb3JwLmNv bT4KPiBTdWJqZWN0OiBJcyBpdCBwb3NzaWJsZSB0byBzZXR1cCBhIExpbnV4LWJhc2VkIGZpcmV3 YWxsIHdpdGggbmV0ZmlsdGVyL2lwdGFibGVzIHRvIHBlcmZvcm0gKkRFRVAgUEFDS0VUIElOU1BF Q1RJT04gKERQSSkqIGF0IE9TSSBMYXllciA3Pwo+Cj4gR29vZCBldmVuaW5nIGZyb20gU2luZ2Fw b3JlLAo+Cj4gSXMgaXQgcG9zc2libGUgdG8gc2V0dXAgYSBMaW51eC1iYXNlZCBmaXJld2FsbCB3 aXRoIG5ldGZpbHRlci9pcHRhYmxlcyB0byBwZXJmb3JtICpERUVQIFBBQ0tFVCBJTlNQRUNUSU9O IChEUEkpKiBhdCBPU0kgTGF5ZXIgNz8KPgo+IERvIGV4aXN0aW5nIG9wZW4gc291cmNlIGZpcmV3 YWxscyBsaWtlIHBmU2Vuc2UsIE9QTnNlbnNlLCBJUEZpcmUsIENsZWFyT1MsIFZ5T1MsIFNtb290 aHdhbGwsIFVudGFuZ2xlLCBORyBGaXJld2FsbCwgdWZ3LCBDb25maWdTZXJ2ZXIgU2VjdXJpdHks IElQQ29wLCBTaG9yZXdhbGwsIEVuZGlhbiBGaXJld2FsbCBDb21tdW5pdHksIGV0YyBldGMsIHN1 cHBvcnQgKkRFRVAgUEFDS0VUIElOU1BFQ1RJT04qIGF0IE9TSSBMYXllciA3Pwo+Cj4gSSBhbSB1 c2luZyBwZlNlbnNlIDIuNC40LXAxIENvbW11bml0eSAodmlydHVhbCBhcHBsaWFuY2UpIGF0IGhv bWUsIHdoaWNoIGFwcGVhcnMgdG8gYmUgdGhlIGJlc3Qgb3IgdG9wIG9wZW4gc291cmNlIGZpcmV3 YWxsIGluIHRoZSB3b3JsZCBhdCB0aGUgbW9tZW50Lgo+Cj4gVGhhbmsgeW91IHZlcnkgbXVjaCBm b3IgeW91ciBhZHZpY2UuCj4KPiAtLS0tLUJFR0lOIEVNQUlMIFNJR05BVFVSRS0tLS0tCj4KPiBU aGUgR29zcGVsIGZvciBhbGwgVGFyZ2V0ZWQgSW5kaXZpZHVhbHMgKFRJcyk6Cj4KPiBbVGhlIE5l dyBZb3JrIFRpbWVzXSBNaWNyb3dhdmUgV2VhcG9ucyBBcmUgUHJpbWUgU3VzcGVjdCBpbiBJbGxz IG9mIFUuUy4gRW1iYXNzeSBXb3JrZXJzCj4KPiBMaW5rOiBodHRwczovL3d3dy5ueXRpbWVzLmNv bS8yMDE4LzA5LzAxL3NjaWVuY2Uvc29uaWMtYXR0YWNrLWN1YmEtbWljcm93YXZlLmh0bWwKPgo+ ICoqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqCj4KPiBTaW5nYXBvcmVhbiBNci4g VHVycml0b3BzaXMgRG9ocm5paSBUZW8gRW4gTWluZydzIEFjYWRlbWljIFF1YWxpZmljYXRpb25z IGFzIGF0IDE0IEZlYiAyMDE5Cj4KPiBbMV0gaHR0cHM6Ly90ZHRlbWNlcnRzLndvcmRwcmVzcy5j b20vCj4KPiBbMl0gaHR0cHM6Ly90ZHRlbWNlcnRzLmJsb2dzcG90LnNnLwo+Cj4gWzNdIGh0dHBz Oi8vd3d3LnNjcmliZC5jb20vdXNlci8yNzAxMjUwNDkvVGVvLUVuLU1pbmcKPgo+IC0tLS0tRU5E IEVNQUlMIFNJR05BVFVSRS0tLS0tCj4KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXwo+IE50b3AgbWFpbGluZyBsaXN0Cj4gTnRvcEBsaXN0Z2F0ZXdheS51 bmlwaS5pdAo+IGh0dHA6Ly9saXN0Z2F0ZXdheS51bmlwaS5pdC9tYWlsbWFuL2xpc3RpbmZvL250 b3AKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KTnRvcCBt YWlsaW5nIGxpc3QKTnRvcEBsaXN0Z2F0ZXdheS51bmlwaS5pdApodHRwOi8vbGlzdGdhdGV3YXku dW5pcGkuaXQvbWFpbG1hbi9saXN0aW5mby9udG9w