Re: IPTables QUEUE target equivalency in other firewalls

[Barney Wolff <barney () pit databus com>]

ipfw certainly does, called divert.  It's used by natd but is general
and usable by others instead or in addition to natd.

On Wed, Feb 26, 2003 at 01:01:01PM -0700, Rod Marten wrote:
> Netfilter/IPTables supports a target of QUEUE which delivers packets to
> a userspace interface where they can be modified,inspected etc.  For
> example, the QUEUE target is used by Snort-inline to inspect and
> allow/drop packets in realtime.
>
> Do any other firewalls have a similar function?  I am particularly
> interested in ipFilter, ipfw, packetfilter, or PIX (I know PIX is highly
> unlikely since it is more of a dedicated appliance).

-- 
Barney Wolff         http://www.databus.com/bwresume.pdf
I'm available by contract or FT, in the NYC metro area or via the 'Net.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards