Willy Tarreau wrote:
> no you're not missing anything. Right now, the ACLs are evaluated in
> the HEADERS state which only exists in HTTP and not in TCP mode. It
> is planned to separate ACLs into layer4 and layer7 in order to be
> able to filter in TCP too, but this requires the protocol layering
> which is in progress.
>
Thanks for this information. I'll use firewall for now.
Great piece of software, and it's development is going in a right direction!
Best regards
Piotr Rybicki
Received on 2007/10/24 14:51
This archive was generated by hypermail 2.2.0 : 2007/11/04 19:21 CET