Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 9 Sep 2003 22:43:16 -0400 
From:      Don Bowman <don@sandvine.com>
To:        "'freebsd-ipfw@freebsd.org'" <freebsd-ipfw@freebsd.org>
Subject:   regex match in ipfw rule?
Message-ID:  <FE045D4D9F7AED4CBFF1B3B813C85337027427C1@mail.sandvine.com>

next in thread | raw e-mail | index | archive | help

has anyone ever considered adding a regular
expression match type to ipfw? it seems like
this might be very useful. To be efficient,
and anchored, I guess it would need to 
be available for both IP and TCP and perhaps
other protocols (e.g. ip payload, tcp payload).

This could be used to match e.g. code-red style
worms.

one barrier is that there is not currently regex
support in kernel, but pcre could probably be
compiled for it.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?FE045D4D9F7AED4CBFF1B3B813C85337027427C1>