Snort mailing list archives

Re: to block intruders


From: Alberto Gonzalez <albertg () cerebro violating us>
Date: Thu, 05 Dec 2002 09:34:30 -0800

Do you want to actively block the attempted attacks and or intruders out? You can use FlexResp to send rst(amonst other things). Your other choices include using SnortSam[1] to dynamically insert rules into your fw based on alerts, or using
Hogwash[2] to drop the offending connections.

Cheers!

   - Alberto

[1] - http://www.snortsam.net
[2] - http://hogwash.sourceforge.net

Coelho, Wagner wrote:

staff I am using snortcenter+acid and would like to know as to block the invasion attempts, because so far I only obtain to logar they.
Thanks.


--
The secret to success is to start from scratch and keep on scratching.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: