On Sun, Aug 12, 2018 at 08:54:31AM +0430, Saber Rezvani wrote: > On 08/12/2018 12:24 AM, Oleg wrote: > > On Sat, Aug 11, 2018 at 12:15:26PM +0200, Pablo Neira Ayuso wrote: > > > We used to have mmap for nfq but that was removed because there was no > > > performance gain from it. > > Interesting. I didn't know about it. Was that a work without > > kernelspace to userspace copying? > > > > > I think it's unlikely we'll see this infra > > > again in place. Moreover, there's already a number of mechanism in > > > place for nfq that were providing similar numbers. > > What mechanisms for example? > > > So in the final decision, is it worthy to implement it in Netfilter > subsystem? like other features which Netfilter provides to users. A new > features which we can call it an HTTP URL filtering. I think whatever solution should be capable to filter not only on URL but on any field in the HTML header.
