> > What I'm looking for is an open source (preferably GPL) project to > > build a proxy-type filter to interwork with netfilter so that packets > > addressed to selected ports can be buffered until enough information > > has been read to determine whether or not they are SOAP requests, and > > then, if they are, to filter them based on content details such as, for > > example, the XML namespaces declared. > > Are you sure you want to do this at the netfilter level. Netfilter will > allow you to redirect packets through a user space handler but that seems > ineffiecent if your dealing with volumes of traffic. Why not just deal > with it at the application level with a proxy type solution and leave > netfilter out of this particular loop? Maybe there is something you could > do with squid?
Maybe you can use apache 2.0 filters. It looked like they made something nice out of that. > > If there already is a project doing this, that's great, I want to join > > it. If there's some reason I haven't thought of why the project is > > either redundent or impossible, that's great, I'd like to know it. If > > it isn't redundent and it isn't impossible and no-one's yet doing it, > > that's great, I'll start one. > > I've seen it mentioned on a GNU mailing list somewhere. Try checking out > freshmeat and sourceforge first? > > > Alex > www.bennee.com/~alex/ > > > Alex > www.bennee.com/~alex/ > > >