|
|
On Tue, Mar 29, 2005 at 07:45:09PM -0700, James Yonan wrote: > On Wed, 30 Mar 2005, Nik wrote: > > > James wrote: > > > > If that plugin interface were compatible with one of the existing linux > > ones (iptables, etc) then existing plugins for that framework could then > > be applied internally to the openvpn tunnel data. > > Exactly -- I was thinking along the lines of either the netfilter > framework or snort. Snort is also interesting because it's a kind of > regular expression grammar for matching patterns in packets, and as such > it might be useful for defining fine-grained access rights for specific > clients, that go beyond basic IP/port-style filtering based on the IP > header. I thought it were libpcap that provides the grammar for snort (and tcpdump, ethereal...)? Rainer ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |