Snort mailing list archives

Snort Inline As an IPS


From: Andres Carrera Rivera <protoss_black88 () hotmail com>
Date: Fri, 1 Oct 2010 11:26:17 -0500


Hi, everyone.

I want to know if somebody has work with snort like a PREVENTION SYSTEM 
(IPS).
I configured my snort, like this:

./configure --enable-inline  and some more things like (Mysql, 
DynamicPlugin)...

now I don't know how to work it as an IPS.

will running snort
I put:

snort -Q -c ./snort.conf

But nothing happens, it doesn't drop or block any connection.
I want someone that guide me how to configure the snort in an Inline 
mode, so
it can drop any malicious connection.



Thanks,

Andres Carrera.

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel


Current thread: