Arch Linux

b4283

Member

Registered: 2008-11-26

Posts: 123

Layer 7

Has anybody been wondering exactly why there's no Layer 7 support in the Linux Kernel ?
This question has been confusing me, because Windows got it, and it appears to be quite a useful
feature for gaining more detailed control over application accesses to the network.
And, secure OS as linux is, doesn't have such feature.

I know there's l7-filter, but it's not always up to date, and, to be honest, patching it and compile kernel all over again just seems too much trouble...

lymphatik

Member

From: Somewhere else

Registered: 2009-03-07

Posts: 119

Re: Layer 7

Is not that manageable with iptables ?

b4283

Member

Registered: 2008-11-26

Posts: 123

Re: Layer 7

Is not that manageable with iptables ?

afaik iptables can manage pid, uid, gid, but not unique process binaries.

i've asked at #iptables once and that was the answer i got, and i guess it still is now.