> > Also I'm wondering say if I have a dmz and allow people to > come into a > > server on port 80, will netfilter inspect the packet on all > 7 layers > > of the OSI model and make sure that it is actually a http > packet and > > following the rules and protocol specifications of http?
No, but there are experimental modules that will allow you to enforce
your own rules. I've heard of some IDS or attack detection capabilities
being done through IP tables.
-- Cheers
-- James
