Rope20050724

Rope is an iptables module that allows packet matching logic to be encoded as simple scripts that execute in the linux kernel. The scripts have access to any IP, UDP or TCP packet header field and the full data payload - allowing complex rules to be developed with ease. Scripts can be tested in user-land against packets captured to disk using tcpdump before deploying an iptables chain.

Integrated with a number of netfilter/iptables match module including conntrack and mark.

Rope has been developed to provide the platform for the next generation of tools from the P2Pwall project, with a focus on controlling complex protocols and a high degree of flexibility.

Q: Why "ROPE"? A: Rope is strong string.