Snort mailing list archives

Re: Snort and IPtables...


From: Phil Wood <cpw () cynosure lanl gov>
Date: Tue, 25 Mar 2003 15:02:52 -0700

Iptables does not interfere with snort what so ever.  However, if for some
reason you want to send a test packet out your snort interface, iptables 
might be configured to drop it, re-route it, change the contents, or whatever
other wonderful things it does to packets before snort (libpcap) sees it.

On Tue, Mar 25, 2003 at 12:44:22PM -0800, Tobias Rice wrote:
 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello again.
I'm curious how Snort (well at least libpcap) is affected by IPtables? 
<assumptions> Libpcap operates at layer 2 and IPtables above that </assumptions> 
If that is the case I'm assuming that IPtables could be tightened down without interference with Snort? I'm sure that 
I'm way off, so please enlighten me.
Many thanks.

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPoC/psNinOuDXR1bEQIC1ACeORC34Wx+s/s6UX1ggUBEDU1d9nUAoJFS
TLFQ7swYotUP78evs/w2DXe5
=ngYc
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list

-- 
Phil Wood, cpw () lanl gov



-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: