L7 & vlans?

[louis-m]

Does L7 work with vlans?
I put a simple L7 rule to block "exe, zip etc"
I then added a "pass" rule (under firewall rules) which linked to the L7 rule which had the vlan as the source.
I tried also with a floating rule and it still didn't work. I could download exe's etc
Any ideas?

[eri--]

Show your system log and screenshots of your rules.

[louis-m]

here ya go:

[eri--]

What is milsnet interface?
System log?

[louis-m]

millsnet is one of my vlan's (OPT1)

is it the config you want? the log only shows 50 entries on the screen.

[eri--]

Well depending on the snapshot you are on, assuming not the today one but previous ones you should see protocol found in system logs.
Also a packet trace for this should also enlighten the ideas.
Those pattern rely on certain regular expression matches and possibly you ar enot hitting!!!

[louis-m]

May 6 18:17:28 ipfw-classifyd: Found Protocol: pdf (rule action block)
May 6 18:17:09 ipfw-classifyd: Found Protocol: pdf (rule action block)

like so? it still downloaded the pdf though.