Snort mailing list archives
Re: Chat/IM
From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 13 Apr 2004 18:07:21 -0400
At 03:26 PM 4/13/2004, Rowland, Krisa W ERDC-ITL-MS Contractor wrote:
Does anyone have an effective way of blocking chat/IM?
Unplug the ethernet cable? (Ok, while that _is_ effective I doubt it's what you want).
More realistically, you could use snort with snortsam or inline-snort. Couple either with the IM rules that come with snort, and a few more that pop up on snort-sigs every so often.
It's not flawless, but it does provide a blocking mechanism and does nail a lot of cases.
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Chat/IM Rowland, Krisa W ERDC-ITL-MS Contractor (Apr 13)
- Message not available
- Re: Chat/IM Matt Kettler (Apr 13)
- Message not available
- <Possible follow-ups>
- RE: Chat/IM Rowland, Krisa W ERDC-ITL-MS Contractor (Apr 13)
- RE: Chat/IM Harper, Patrick (Apr 13)
- Re: Chat/IM Remko Lodder (Apr 13)
- Re: Chat/IM Craig Paterson (Apr 13)
- Re: Chat/IM Bryan Irvine (Apr 13)
- Re: Chat/IM Remko Lodder (Apr 13)
- RE: Chat/IM Harper, Patrick (Apr 13)
- RE: Chat/IM Larry Pitcher (Apr 13)
- Re: Chat/IM Mark . Schutzmann (Apr 14)
- RE: Chat/IM Rowland, Krisa W ERDC-ITL-MS Contractor (Apr 14)
- RE: Chat/IM Lyons, Jon (Apr 14)