Mailing List Archive: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?

Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?

ceo at teo-en-ming-corp

Apr 24, 2019, 8:23 AM

Post #1 of 5 (1115 views)

Permalink

Good evening from Singapore,

Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?

Do existing open source firewalls like pfSense, OPNsense, IPFire, ClearOS, VyOS, Smoothwall, Untangle, NG Firewall, ufw, ConfigServer Security, IPCop, Shorewall, Endian Firewall Community, etc etc, support *DEEP PACKET INSPECTION* at OSI Layer 7?

I am using pfSense 2.4.4-p1 Community (virtual appliance) at home, which appears to be the best or top open source firewall in the world at the moment.

Thank you very much for your advice.

-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
Qualifications as at 14 Feb 2019

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Re: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7? [ In reply to ]

ceo at teo-en-ming-corp

Apr 24, 2019, 8:27 AM

Post #2 of 5 (1115 views)

Permalink

Good evening from Singapore,

It seems that I can use the ndpi-netfilter Linux Kernel module from Humberto Juc? (betolj) for DEEP PACKET INSPECTION at OSI Layer 7. I found the following article.

Article: Installing and Configuring ndpi-netfilter for traffic controlling on ubuntu
Date Published: 27 February 2016
URL: http://thingsinlinux.blogspot.com/2016/02/installing-and-configuring-ndpi.html

But can I use it with the latest Linux Kernel 5.1-rc6?

Please advise.

Thank you very much.

-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
Qualifications as at 14 Feb 2019

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----

-----Original Message-----
From: Turritopsis Dohrnii Teo En Ming <ceo@teo-en-ming-corp.com>
Sent: Wednesday, 24 April 2019 11:24 PM
To: ntop@listgateway.unipi.it
Cc: Turritopsis Dohrnii Teo En Ming <ceo@teo-en-ming-corp.com>
Subject: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?

Good evening from Singapore,

Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?

Do existing open source firewalls like pfSense, OPNsense, IPFire, ClearOS, VyOS, Smoothwall, Untangle, NG Firewall, ufw, ConfigServer Security, IPCop, Shorewall, Endian Firewall Community, etc etc, support *DEEP PACKET INSPECTION* at OSI Layer 7?

I am using pfSense 2.4.4-p1 Community (virtual appliance) at home, which appears to be the best or top open source firewall in the world at the moment.

Thank you very much for your advice.

-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers

Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Re: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7? [ In reply to ]

faranda at ntop

Apr 24, 2019, 9:59 AM

Post #3 of 5 (1115 views)

Permalink

Hi,

nEdge can perform L7 inspection and policing, please check out
https://www.ntop.org/products/traffic-analysis/ntopng-edge . Its core
components are the nDPI and ntopng. Please note that we only support
ubuntu 16 and ubuntu 18 for nEdge.

Regards,

Emanuele

On 4/24/19 5:27 PM, Turritopsis Dohrnii Teo En Ming wrote:
> Good evening from Singapore,
>
> It seems that I can use the ndpi-netfilter Linux Kernel module from Humberto Jucá (betolj) for DEEP PACKET INSPECTION at OSI Layer 7. I found the following article.
>
> Article: Installing and Configuring ndpi-netfilter for traffic controlling on ubuntu
> Date Published: 27 February 2016
> URL: http://thingsinlinux.blogspot.com/2016/02/installing-and-configuring-ndpi.html
>
> But can I use it with the latest Linux Kernel 5.1-rc6?
>
> Please advise.
>
> Thank you very much.
>
> -----BEGIN EMAIL SIGNATURE-----
>
> The Gospel for all Targeted Individuals (TIs):
>
> [The New York Times] Microwave Weapons Are Prime Suspect in Ills of
> U.S. Embassy Workers
>
> Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html
>
> ********************************************************************************************
>
> Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
> Qualifications as at 14 Feb 2019
>
> [1] https://tdtemcerts.wordpress.com/
>
> [2] https://tdtemcerts.blogspot.sg/
>
> [3] https://www.scribd.com/user/270125049/Teo-En-Ming
>
> -----END EMAIL SIGNATURE-----
>
> -----Original Message-----
> From: Turritopsis Dohrnii Teo En Ming <ceo@teo-en-ming-corp.com>
> Sent: Wednesday, 24 April 2019 11:24 PM
> To: ntop@listgateway.unipi.it
> Cc: Turritopsis Dohrnii Teo En Ming <ceo@teo-en-ming-corp.com>
> Subject: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?
>
> Good evening from Singapore,
>
> Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?
>
> Do existing open source firewalls like pfSense, OPNsense, IPFire, ClearOS, VyOS, Smoothwall, Untangle, NG Firewall, ufw, ConfigServer Security, IPCop, Shorewall, Endian Firewall Community, etc etc, support *DEEP PACKET INSPECTION* at OSI Layer 7?
>
> I am using pfSense 2.4.4-p1 Community (virtual appliance) at home, which appears to be the best or top open source firewall in the world at the moment.
>
> Thank you very much for your advice.
>
> -----BEGIN EMAIL SIGNATURE-----
>
> The Gospel for all Targeted Individuals (TIs):
>
> [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers
>
> Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html
>
> ********************************************************************************************
>
> Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019
>
> [1] https://tdtemcerts.wordpress.com/
>
> [2] https://tdtemcerts.blogspot.sg/
>
> [3] https://www.scribd.com/user/270125049/Teo-En-Ming
>
> -----END EMAIL SIGNATURE-----
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Re: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7? [ In reply to ]

ceo at teo-en-ming-corp

Apr 24, 2019, 4:37 PM

Post #4 of 5 (1114 views)

Permalink

Noted with thanks.

-----Original Message-----
From: ntop-bounces@listgateway.unipi.it <ntop-bounces@listgateway.unipi.it> On Behalf Of Emanuele Faranda
Sent: Thursday, 25 April 2019 12:59 AM
To: ntop@listgateway.unipi.it
Subject: Re: [Ntop] Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?

Hi,

nEdge can perform L7 inspection and policing, please check out https://www.ntop.org/products/traffic-analysis/ntopng-edge . Its core components are the nDPI and ntopng. Please note that we only support ubuntu 16 and ubuntu 18 for nEdge.

Regards,

Emanuele

On 4/24/19 5:27 PM, Turritopsis Dohrnii Teo En Ming wrote:
> Good evening from Singapore,
>
> It seems that I can use the ndpi-netfilter Linux Kernel module from Humberto Jucá (betolj) for DEEP PACKET INSPECTION at OSI Layer 7. I found the following article.
>
> Article: Installing and Configuring ndpi-netfilter for traffic
> controlling on ubuntu Date Published: 27 February 2016
> URL:
> http://thingsinlinux.blogspot.com/2016/02/installing-and-configuring-n
> dpi.html
>
> But can I use it with the latest Linux Kernel 5.1-rc6?
>
> Please advise.
>
> Thank you very much.
>
> -----BEGIN EMAIL SIGNATURE-----
>
> The Gospel for all Targeted Individuals (TIs):
>
> [The New York Times] Microwave Weapons Are Prime Suspect in Ills of
> U.S. Embassy Workers
>
> Link:
> https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave
> .html
>
> **********************************************************************
> **********************
>
> Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
> Qualifications as at 14 Feb 2019
>
> [1] https://tdtemcerts.wordpress.com/
>
> [2] https://tdtemcerts.blogspot.sg/
>
> [3] https://www.scribd.com/user/270125049/Teo-En-Ming
>
> -----END EMAIL SIGNATURE-----
>
> -----Original Message-----
> From: Turritopsis Dohrnii Teo En Ming <ceo@teo-en-ming-corp.com>
> Sent: Wednesday, 24 April 2019 11:24 PM
> To: ntop@listgateway.unipi.it
> Cc: Turritopsis Dohrnii Teo En Ming <ceo@teo-en-ming-corp.com>
> Subject: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?
>
> Good evening from Singapore,
>
> Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7?
>
> Do existing open source firewalls like pfSense, OPNsense, IPFire, ClearOS, VyOS, Smoothwall, Untangle, NG Firewall, ufw, ConfigServer Security, IPCop, Shorewall, Endian Firewall Community, etc etc, support *DEEP PACKET INSPECTION* at OSI Layer 7?
>
> I am using pfSense 2.4.4-p1 Community (virtual appliance) at home, which appears to be the best or top open source firewall in the world at the moment.
>
> Thank you very much for your advice.
>
> -----BEGIN EMAIL SIGNATURE-----
>
> The Gospel for all Targeted Individuals (TIs):
>
> [The New York Times] Microwave Weapons Are Prime Suspect in Ills of
> U.S. Embassy Workers
>
> Link:
> https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave
> .html
>
> **********************************************************************
> **********************
>
> Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
> Qualifications as at 14 Feb 2019
>
> [1] https://tdtemcerts.wordpress.com/
>
> [2] https://tdtemcerts.blogspot.sg/
>
> [3] https://www.scribd.com/user/270125049/Teo-En-Ming
>
> -----END EMAIL SIGNATURE-----
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
Qualifications as at 14 Feb 2019

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Re: Is it possible to setup a Linux-based firewall with netfilter/iptables to perform *DEEP PACKET INSPECTION (DPI)* at OSI Layer 7? [ In reply to ]

ceo at teo-en-ming-corp

Apr 24, 2019, 4:37 PM

Post #5 of 5 (1114 views)

Permalink