ROPE is an open-ended iptables match module that allows
rules to be written using a simple but powerful scripting
language. It is designed for controlling complex high-level
protocols that cannot be blocked using traditional criteria
based on port numbers (etc.). Criteria can include tests on
any field of the IP, UDP, or TCP headers as well as the
packet data payload.