Yes, what you are actually looking for is a filter for applications that send packets through your firewall => so called LAYER 7 FILTER! Why layer 7 - see OSI Layer model. Regards, Edvin Seferovic -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Maxime Ducharme Sent: Freitag, 04. März 2005 19:45 To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: Stateful packet inspection Yes I am not sure of the exact word for "Layer 7 filter" Someone can confirm this ? TIA Maxime Ducharme Programmeur / Spécialiste en sécurité réseau ----- Original Message ----- From: "Daniel Lopes" <lopsch@xxxxxxxxxx> To: <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Friday, March 04, 2005 11:03 AM Subject: Re: Stateful packet inspection > I thought SPI means inspecting packets for their state i.e. NEW or > ESTABLISHED. What you mean is a Layer 7 filter, the link to it was > posted above ;). >