Packet Filter / Replacer ?

I figure if anybody knows of a tool like this, they would probablly be around here. Im looking for a piece of software that basically sniffs every outbound packet for a string, such as a phone number, and either drops the packet or replaces the string within the packet based on its contents. This is a kinda-sorta-firewall but not really. I have been having arguements based on artistic differences with several pieces of software with embedded spyware, eg i believe it shouldnt know what im doing, vs it does. A filter as i outlined above would neuter it completely, and there must be one somewhere. I know the program im looking for is probablly considered spyware, however im only planning on filtering my outbound traffic, more explicitly, outbound traffic i dont want my computer to send. Afterall, im the owner of the stupid computer, if its misbehaving i need to curb this behavior immediately. Suggestions welcome, thanks for your time guys.

Not what you asked for, but what you should have ;) Ad-Aware

heh, unfortunately i need the naughty software. i dont see why i cant limit what its allowed to send without my knowledge. software phones home too much these days, causing me trouble.

I believe Zone Alarm allows you to control which programs are allowed to access the internet... problem solved?

Unfortunately, simply blocking all communication related to the process causes it to cease function. Im now experimenting with SNORT rules and see if they can do anything about it.

look here for security tools.

http://www.megasecurity.org/Main.html

http://www.insecure.org/tools.html

beware as some of these tools will contain malicious code.............

btw if you are already connected to the 'net it is unlikely a packet containing a phone number will be sent........

>> and either drops the packet or replaces the string within the packet based on its contents

hard, as data is likely to be encrypted, compressed or in some other way just partial in any given packet. That is the whole msg is not sent in one packet.

Snort can do it. I just ran a test on my freebsd router. Even with packet fragmentation snort rules should be able to do everything i wanted. No way will steam be phoneing home about my cd keys hehahah!

I think Proxomitron does it:
http://www.geocities.com/srl_list/index.html

Quote:

---

my freebsd router

---

You r0x0rz!

Norton Internet securities will warn you if data like phone numbers/CC numbers etc (or whatever the hell else you tell it) is trying to be sent. Simply then choose NO

Norton=lame

use on of the other methods above

Quote:

---

Originally posted by Waldo2k2
Norton=lame

use on of the other methods above

---

Lame on this thread or just lame?

If the latter you are confused.

>>If the latter you are confused.

Not really, I've never had it work well on any of my machines, therefore i don't recommend it.

Note: lets not turn this into a norton sucks, no it doesnt, yada yada yada thread