|
hey I have a Cisco ASA that will do packet inspection and block POST or whatever you can find a ASA5200 for a few grand on ebay
Before that I used IPTABLES sort of a poormans packet inspection, heres an example:
iptables -A INPUT -p tcp --dport 80 -i eth0 -j HTTP_FILTER
iptables -A HTTP_FILTER -j DROP -m string --from 30 --to 60 --algo bm --string 'POST '
this is kinda rudimentry and you need to keep it stateless - I had troubles with CONNTRACK if it wasn't stateless
|