On 1/10/07, Dave Long <[EMAIL PROTECTED]> wrote:
Is it possible to detect SSH tunnels traveling through a Linux firewall (iptables). In other words, how do I detect normal ssh communication versus http traffic going through SSH? My initial thoughts were that normal SSH traffic would have a specific connection and packet rate while other traffic like HTTP going through SSH would have a much different connection rate. Anyway, I would like to know other ideas. -- Dave Long [EMAIL PROTECTED]
Force the HTTP traffic into a transparent proxy. /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
