<![CDATA[Layer7 Rules can close connections?]]>Hi,
I've been trying to filter some http packets that come with this form "GET /0.XXX" and it's filtering the packets very well using this pattern code:

http-botnet1
/\x3f0\x2e[0-9].

This blocks all the packets, but what I truly want is that if a packet with that form if recived, the connection should be closed.

Is there a way to do that?

]]>https://forum.netgate.com/topic/55992/layer7-rules-can-close-connectionsRSS for NodeWed, 22 Jul 2026 08:36:48 GMTSun, 05 May 2013 07:09:36 GMT60<![CDATA[Reply to Layer7 Rules can close connections? on Wed, 15 May 2013 23:08:25 GMT]]>IT just blocks the whole connection if a packet that matches is received.
Not whole packets.

]]>https://forum.netgate.com/post/395784https://forum.netgate.com/post/395784Wed, 15 May 2013 23:08:25 GMT<![CDATA[Reply to Layer7 Rules can close connections? on Fri, 10 May 2013 19:10:34 GMT]]>I say you probably want to look into snort for this sort of stuff

]]>https://forum.netgate.com/post/394998https://forum.netgate.com/post/394998Fri, 10 May 2013 19:10:34 GMT