From owner-freebsd-net@FreeBSD.ORG Thu Feb 10 23:08:06 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 11689106564A for ; Thu, 10 Feb 2011 23:08:06 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: from mail-ey0-f182.google.com (mail-ey0-f182.google.com [209.85.215.182]) by mx1.freebsd.org (Postfix) with ESMTP id 9A0A88FC14 for ; Thu, 10 Feb 2011 23:08:05 +0000 (UTC) Received: by eyf6 with SMTP id 6so1150697eyf.13 for ; Thu, 10 Feb 2011 15:08:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=PgvcUuuxYxnxFbQ+23dXPKxfFMfrNHmTfI3BgJswdpY=; b=BqK6YU7mCCH8wXIRyLIVKwkEvqI4nnYZC/W+SkFE/lpXoUN1t9NN+5H38Y2HUXC9TJ YFdFRr2FANi7wVnofTg5feb/fiF+DyRlaZEVCuwGzp4QuKwtDHlWnHTIWav4likx6jM9 Y14Yu2Cz0v6CX9vLJUYoQYtwJwlUlwNAY9P68= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=KtLWhG3FXghXtcGu7/p/rB3RUfEUbyXoyf9dVcCIGeWFcQN0OYAlrRqHa5RdCQ4uDC rO8rTf2CrjcQVDQ4RSsxlNngVkG440k4Nx5okyXpnQ8XAFJBPCQs38vE0+7e9JquHxta RQlbQK9rqHJ+jTJTnSePY9HfhgVa96/eDRluM= Received: by 10.213.104.147 with SMTP id p19mr4457426ebo.77.1297377645233; Thu, 10 Feb 2011 14:40:45 -0800 (PST) MIME-Version: 1.0 Received: by 10.213.101.7 with HTTP; Thu, 10 Feb 2011 14:40:25 -0800 (PST) In-Reply-To: <4D54656A.8080507@rewt.org.uk> References: <20110210155622.GA60117@icarus.home.lan> <4D54656A.8080507@rewt.org.uk> From: Scott Ullrich Date: Thu, 10 Feb 2011 17:40:25 -0500 Message-ID: To: Joe Holden Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-net@freebsd.org, freebsd@jdc.parodius.com Subject: Re: Reliable PCI wifi cards, and layer 7 filtering X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Feb 2011 23:08:06 -0000 On Thu, Feb 10, 2011 at 5:23 PM, Joe Holden wrote: > On 10/02/2011 15:56, Jeremy Chadwick wrote: > There is 'ipfw-classifyd' which has been somewhat improved by the pfsense > team in order to support pf - I don't have the exact url to hand, but IIRC > it is hosted on googlecode somewhere. > > It does what you describe, uses regex to match payload. Hi, Our custom code is held here: https://rcs.pfsense.org/projects/pfsense-tools Simply check out the tools repo and inside pfPorts/ you will find all our goodies including ipfw-classifyd. Hope this helps! Scott