[Snort-users] Snort and Brdiging Firewall

From: Allan Dover <bigaldover(at)hotmail.com>
Date: Wed Apr 02 2003 - 22:30:42 EST

Hey Fellow Snorters,

I put togeteher a new RH 8.0 Linux box.
Set up Snort 2.0 with ACID and MySQL, works great. Im running it as my main IDS now.
although I still Have 1.91 running on another Linux Box. I have patched my kernel and have enabled Bridging and Netfiler Firewall support. I am trying to figure out where to go next. Snort is catching everything coming in the nextwork very efficiently, I want to have snort dynamically change the IPTABLES so if one of the users tries to launch Kazaa, Snort would log the attempt and dynamically block that users from using Kazaa and so on.

Anyone do anything similar to this ?

Any help is greatly appreciated.

Allan
bigaldover@hotmail.com

---

The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail

---

This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Wed Apr 2 22:38:09 2003