On Saturday 13 March 2004 2:35 pm, Mihael Kukec wrote:
> Is that possible? Matching text from HTTP?
It is just about possible (with the string match), however it is not at all
recommended:
1. It will only match if the entire string is contained within one packet - if
the string you search for crosses packet boundaries, netfilter cannot match
it.
2. It can only search for plaintext strings, and an increasing amount of HTTP
content these days is compressed (gzipped, basically) during transmission.
> And possibly changing it?
No, netfilter cannot change the contents of a packet (only the contents of
certain headers).
> For example, change every occurrence of ABC with *** ?
Use Squid, or Apache as a proxy.
Antony.
--
There's no such thing as bad weather - only the wrong clothes.
- Billy Connolly
Please reply to the list;
please don't CC me.
