> I would recommend you look at solutions which work at the application > layer instead of the network routing layer for this sort of thing. > Depending on exactly what it is you're trying to do, Snort might be a > good place to start. That reminds me: Has anyone built snort-inline to work with RH9? Building turned ugly and I gave up in futility. If you've done it, please list some info. Note: Latest kernel with POM