search for: fw_get_option_

...tion_* ). The upper layer makes decisions based those parameters, and other parameters set in previous events. The decisions are communicated either through setting variables or directly modifying the control flow (tipically aborting). The proxy reads the variables set by the upper layer (with fw_get_option_*), and acts accordingly. Rationale: By my experience all firewall software have the problem of not giving enough chance of decision to the firewall administrator, and not going up enough on the OSI layer. The (even stateful) packet filters are by design cannot easily have the information needed...