Re: [pfSense-discussion] Payload inspection

2005-09-29 Thread A Rossi
for my noobish questions. regex wasn't my idea, as I don't know what it is. I am assuming that what I was describing is that. good day, A - Original Message - From: "Travis H." <[EMAIL PROTECTED]> To: Sent: Thursday, September 29, 2005 1:56 AM Subject: Re: [pfSense-discu

Re: [pfSense-discussion] Payload inspection

2005-09-29 Thread Travis H.
On 9/21/05, A Rossi <[EMAIL PROTECTED]> wrote: > I was thinking of payload inspection as a way to check to see if the payload > contains requested data (like HTML, or mp3 or whatever the user is > downloading) to make sure that it doesn't contain infected data (with a worm > or such) that is piggyb

Re: [pfSense-discussion] Payload inspection

2005-09-21 Thread A Rossi
ssage - From: "Chris Buechler" <[EMAIL PROTECTED]> To: Sent: Wednesday, September 21, 2005 11:42 AM Subject: Re: [pfSense-discussion] Payload inspection > A Rossi wrote: > > >Would it be feasible to add payload inspection to pfSense after its first > >release?

RE: [pfSense-discussion] Payload inspection

2005-09-21 Thread Gary Buckmaster
ribly practical or safe "feature" to have.    -Gary -Original Message-From: Tommaso Di Donato [mailto:[EMAIL PROTECTED]Sent: Wednesday, September 21, 2005 4:04 PMTo: discussion@pfsense.comSubject: Re: [pfSense-discussion] Payload inspection On 9/21/05, Chris B

Re: [pfSense-discussion] Payload inspection

2005-09-21 Thread Tommaso Di Donato
On 9/21/05, Chris Buechler <[EMAIL PROTECTED]> wrote: [...]In the open source world, iptables has the ability to basically run aregexp on payloads, but it's a stupid thing to do and isn't secure.Nice thread here: http://thread.gmane.org/gmane.os.freebsd.devel.pf4freebsd/952 ...mmh, I think he was s

Re: [pfSense-discussion] Payload inspection

2005-09-21 Thread Scott Ullrich
Everyone break out the pitch-forks and fire! There's gonna be a lynching for cross-posters! Scott On 9/21/05, Greg Hennessy <[EMAIL PROTECTED]> wrote: > > > Nice thread here: > > http://thread.gmane.org/gmane.os.freebsd.devel.pf4freebsd/952 > > > > The OP in that thread wasn't the sharpest kni

RE: [pfSense-discussion] Payload inspection

2005-09-21 Thread Greg Hennessy
> Nice thread here: > http://thread.gmane.org/gmane.os.freebsd.devel.pf4freebsd/952 > The OP in that thread wasn't the sharpest knife in the tray, he asked the same question repeatedly elsewhere. > I would like to see it more protocol aware than it is now, > though how much we can accompli

Re: [pfSense-discussion] Payload inspection

2005-09-21 Thread Chris Buechler
A Rossi wrote: Would it be feasible to add payload inspection to pfSense after its first release? depends on what you mean by "payload inspection". There are as many definitions of "deep inspection", "payload inspection", etc. as there are marketing departments at firewall companies. I

Re: [pfSense-discussion] Payload inspection

2005-09-21 Thread Scott Ullrich
I do not know of any layer 7 stuff for the BSD's besides the usual snort, etc. Scott On 9/21/05, A Rossi <[EMAIL PROTECTED]> wrote: > Would it be feasible to add payload inspection to pfSense after its first > release? > (FYI: I don't know how to code, but I am trying to teach myself) > >