Re: Who is first

[Nick Hatch <nick () restek wwu edu>]

Snort sees the traffic first, before IPtables because it is monitoring 
the interface in promiscuous mode. See section 3.13 in the FAQ for more 
info.

Postfix, being an application, will see the traffic last.

-Nick

Eduardo E. Silva wrote:

> On a RH 9 box I have Postfix, snort and IPtables. If an email with a
> content I don't want such a SPAM. Who sees first this stream ? Postfix
> filters ? IPtables's rules or Snort smtp.rules ?
>  
--
Nick Hatch
ResTek Consultant
restek.wwu.edu 650-2946



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users