Definitely a new kernel is required. I had been reluctant to do a Cobalt layer 7 patched kernel for the same reasons why the IPCop devel team has been hesitant. I was hoping that it could be done in userspace by now. I'll look into making one and if successful, I can make it available but caution people to only use it if they know why they need it, if they don't know why they would need a layer 7 kernel, they probably don't need it.