Re: SNort FlexResp Questions

[Jeff Nathan <jeff () snort org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ron,

flexresp is only somewhat reliable.  As I mentioned in my previous 
message, flexresp2 should be used in favor of flexresp.  You should 
consult the documentation in the doc directory of your Snort source 
distribution.  README.FLEXRESP, README.FLEXRESP2 (if you're using a CVS 
version of Snort).

The react detection plugin attempts to block URLs, though it is of 
questionable effectiveness.

the Snort mailing list archives over the past five years will 
definitely help you out when seeking answers for these questions.

Regards,

- -Jeff

On Dec 28, 2004, at 12:34 AM, Ron Jenkins wrote:

> Is anyone using the flexresp feature?  If so, how is it working?
>
>  
>
> Is anyone using the flexresp feature as a URL filter.  If so, is there 
> a way to send a deny web page back to the workstation?
>
>  
>
> Thanks…
>
>  
>
> Ron Jenkins (MCNE, CNE6, MCP, CCNA, CCEA)
>  Senior Architect
> Data Integrity, LLC
>  "We Integrate People with Solutions"
> 1724 Dallas Drive
>  Suite 11
> Baton Rouge, La 70806
>  Office. 225.927.8030
>  Fax. 225.927.8033
>  Cell225.931.1632
>  Email. rjenkins () dibr net
>  Web. www.dibr.net
>
>   

- --
http://cerberus.sourcefire.com/~jeff       (DSA key id 6923D3FD)
"Problems cannot be solved at the same level of awareness that
created them."   - Albert Einstein

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFB2FYzEqr8+Gkj0/0RAvdMAJ9HEMPDwaz+HhvLsMauie3mzizsMACguQKS
fS3MfONG/niA9/v1to25akk=
=SklI
-----END PGP SIGNATURE-----



-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users