Re: Freebsd & snort inline

[Alexey Vesnin <ss666 () bsd mirknigi ru>]

ruurdster () gmail com wrote:
> Hi,
>
> I want to use snort-inline on my freebsd 6.1 box with ipfw, bridge and mysql. I have it configured the right way. But 
> the only alerts/drops i get are the following:
>
> (snort decoder) Bad Traffic Loopback IP 
> (snort decoder) Bad Traffic Same Src/Dst IP 
>
> I heard that the freebsd divert do not work with the bridge? I hope someone figured it out.
>
>
> Thanks in advantage
>
> Ruurd
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence 
> in Information Security. Our program offers unparalleled Infosec management 
> education and the case study affords you unmatched consulting experience. 
> Using interactive e-Learning technology, you can earn this esteemed degree, 
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------
>
>   
It works just FINE - I'm currently using it on STABLE-5 and STABLE-4, 
tested on STABLE-6 a week ago. describe your configs and task. It must 
work just fine.

Alexey "Steel Scorpion 666" Vesnin

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------