> > It looks to me like L7 filtering is not supported. Am I wrong? > > > > Thanks. > > Hi flyingrhino, > > To get anwhere past L3, you need to queue to userspace and process with your own > software. > > Start here: > https://wiki.nftables.org/wiki-nftables/index.php/Queueing_to_userspace > > Cheers ... Duncan. Hi Duncan, Thanks for the quick response. At least it's doable, albeit a kind of roundabout way. Pity nft can't do this, it would be awesome. Do you or anyone else on this list know of linux software that lives in userspace that can filter these packets that nft raises to userspace? Thanks.
