lkml.org 
[lkml]   [1998]   [Nov]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: content-filtering of tcp-ip-packages
Date
In article <linux.kernel.3660111C.781662ED@uni-bremen.de>,
Andreas Schuldei <schuldei@uni-bremen.de> wrote:
>I would like to hack firewall-part of the kernel so that it would not
>let through any java-script or java or activ-x stuff. I think about some
>kind of string recognition for Java-(script) and some recognition of the
>file-name (*.ocx) for activ-X.
>
>
>What efford whozuld be needed? Is this possible? How would you approach
>this topic?

It's possible, and it's been done; I did something like this
for McAfee associates, and the kernel bits are available (2.0.28,
and I've still got the 1.2.13 kernel) on

http://www.pell.chi.il.us/~orc/Webshield/

I don't have the user-level stuff, since that's McAfee proprietary,
but it's a pretty simple thing to pick up connections, manually
bridge them, then hand them off to a process to mangle. I did,
however, write a BSD-licensed firewall (since WebShield Is Not A
Firewall(tm), this doesn't break NDA's. Heh.) that uses this
kernel, so you can look at it for the start of ideas on how to
use the webshield kernel:

http://www.pell.chi.il.us/~orc/Code/

As far as I know none of the McAfee patches (aside from the enhanced
memory detection code) made it into the baseline kernel, so if you
use it you've gotta really love 1.2.13 or 2.0.28 or you've got to
love hacking up tcp stacks for fun and profit.

____
david parsons \bi/ I'd suggest you buy WebShield from McAfee, but
\/ they don't want to sell it because they're a
100% Pure NT(tm) company now.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:45    [W:0.111 / U:0.324 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site