Snort mailing list archives
Re: to block intruders
From: Alberto Gonzalez <albertg () cerebro violating us>
Date: Thu, 05 Dec 2002 09:34:30 -0800
Do you want to actively block the attempted attacks and or intruders out? You can use FlexResp to send rst(amonst other things). Your other choices include using SnortSam[1] to dynamically insert rules into your fw based on alerts, or using
Hogwash[2] to drop the offending connections. Cheers! - Alberto [1] - http://www.snortsam.net [2] - http://hogwash.sourceforge.net Coelho, Wagner wrote:
staff I am using snortcenter+acid and would like to know as to block the invasion attempts, because so far I only obtain to logar they.Thanks.
-- The secret to success is to start from scratch and keep on scratching. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- to block intruders Coelho, Wagner (Dec 05)
- Re: to block intruders Alberto Gonzalez (Dec 05)
- Block Conncection Atul Shrivastava (Dec 07)
- How to use the Various Outplugins present in the SnortCenter Atul Shrivastava (Dec 07)
- Re: How to use the Various Outplugins present in the SnortCenter Alberto Gonzalez (Dec 07)
- Re: Block Conncection Alberto Gonzalez (Dec 07)
- How to use the Various Outplugins present in the SnortCenter Atul Shrivastava (Dec 07)