Snort mailing list archives
Re: SNort FlexResp Questions
From: Rich Adamson <radamson () routers com>
Date: Tue, 28 Dec 2004 05:35:23 -0600
Is anyone using the flexresp feature? If so, how is it working?
I've not used it recently, but it was working in a previous release. I think I remember someone posting something about rewriting that, and if memory serves correctly, it was referred to as flexresp2. Not sure where it stands though.
Is anyone using the flexresp feature as a URL filter. If so, is there a way to send a deny web page back to the workstation?
No, flexresp can only send RST and/or ICMP packets either to the originating IP or to the destination IP. See the doc/README.FLEXRESP and doc/snort_manual.pdf. ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SNort FlexResp Questions Ron Jenkins (Dec 27)
- Re: SNort FlexResp Questions Rich Adamson (Dec 28)
- Re: SNort FlexResp Questions Jose Maria Lopez (Dec 28)