Snort mailing list archives
blocking outbound ports
From: Agile Aspect <agile.aspect () gmail com>
Date: Wed, 14 Jul 2010 15:18:59 -0700
Hi - is it possible to block ssh/sftp applications from accessing open outbound ports? For instance, suppose the outbound port 995 is open for POP/SSL on the company LAN. I then go home and configure the SSH server on home Linux machine to run on port 995. Then I return to the company LAN and attempt to use sftp to transfer files the company LAN to my machine at home. Can I block this attempt with Snort? The OS would be Solaris 10 running IP FIltering, Squid, and Snort. Only 1 inbound port would be open, namely, HTTPS, and 5 outbound ports, namely, HTTP,HTTPS, SMTPS, IMAPS and POP3S. Any help would be greatly appreciated. -- Agile -- Enjoy global warming while it lasts. ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- blocking outbound ports Agile Aspect (Jul 14)
- Re: blocking outbound ports Joel Esler (Jul 14)