Re: IPtables l7 string

[Pablo Neira Ayuso <pablo@netfilter.org>]

Stephan Higuti wrote:
> Hello, anybody can help me with this:
>
> osiris:~# iptables -t filter -A FORWARD -m string --string "orkut" -j DROP
> iptables v1.3.4: STRING match: You must specify `--algo'
> Try `iptables -h' or 'iptables --help' for more information.
>
> --algo?
>
> What's?
$ man iptables

--algo bm|kmp
Select the pattern matching strategy. (bm = Boyer-Moore, kmp = 
Knuth-Pratt-Morris)
--
The dawn of the fourth age of Linux firewalling is coming; a time of 
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris