Snort mailing list archives
Block Conncection
From: Atul Shrivastava <atul_iet () yahoo com>
Date: Fri, 6 Dec 2002 23:20:38 -0800 (PST)
Hi, Can anyone tell me how can we block certain connection, let sat that I want to block every connection for telnet that uses username "root" Can anybody give me the rule. This will illustrate me the use of "react" keyword. I know that this keywork works with three modes: 1. Block the source 2. Block the Destination 3. Block both of them. I have also used them but not get the desired result. Please tell me the required and efficient rule if somebody has tested it fully. Thnaks in advance. Regards and have a nice day, Atul Shrivastava "Coelho,_Wagner" <tellnet () terra com br> wrote:staff I am using snortcenter+acid and would like to know as to block the invasion attempts, because so far I only obtain to logar they. Thanks. Regards and have a nice day, Atul Shrivastava --------------------------------- Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now
Current thread:
- to block intruders Coelho, Wagner (Dec 05)
- Re: to block intruders Alberto Gonzalez (Dec 05)
- Block Conncection Atul Shrivastava (Dec 07)
- How to use the Various Outplugins present in the SnortCenter Atul Shrivastava (Dec 07)
- Re: How to use the Various Outplugins present in the SnortCenter Alberto Gonzalez (Dec 07)
- Re: Block Conncection Alberto Gonzalez (Dec 07)
- How to use the Various Outplugins present in the SnortCenter Atul Shrivastava (Dec 07)