On Thursday 25 March 2004 11:59, Joe Mott wrote: > Is netfilter capable of knowing when someone is crafting SMTP (or FTP or > HTTP or ...) packets that violate RFC rules to exploit a vulnerability > in some server? No, application-level filtering / analysis is outside the scope of netfilter. Try http://www.snort.org/ Cheers, Gavin.