mobility and firewall

[Ante Karamatić]

On Sat, 2005-06-04 at 03:32 -0400, Michael R Head wrote:

> Still, it's not very helpful unless it uses the full path to the
> executable. 

iptables -A OUTPUT -p TCP -m layer7 --l7proto http -j ALLOW
iptables -A INPUT -m layer7 --l7proto bittorent -j DROP

etc... layer7 anyone? I use this daily. It works...

-- 
Ante Karamatic|--|ivoks(@)grad.hr|--|PGP: D3BDA225
http://master.grad.hr/~ivoks/|--|ICQ: 64631782
May, 15. <herve> we're fixing the universe, it's not an easy duty!