Re: send reset packet

[Saad Kadhi <saad () docisland org>]

On Fri, Jan 03, 2003 at 10:40:18AM +0700, Anthony Liberty wrote:
> Hi , as a newbie , i'm quite confused on how snort works 
> *     Anybody know how , to write snort rules to make it send a reset
> packet to unwanted connection. For example , my linux server box should only
> be telnet from my laptop. So when there is a telnet connection request from
> other PC to my linux server box , snort box should send a reset packet.
>
> I'm experienced in ISS Real Secure IDS. This box can be configured as an
> active NIDS.
>
> please pointing me.
get a look at flexresp  and  the  'react'  keyword.  flexresp  is  still
considered _alpha_ code so testing is needed.

using flexresp is explained  in  docs/README.FLEXRESP  included  in  the
source tarball.

hth
-- 
Saad Kadhi -- [saad () docisland org] [saad.kadhi () hapsis fr]
[pgp keyid: 35592A6D http://pgp.mit.edu]
[pgp fingerprint: BF7D D73E 1FCF 4B4F AF63  65EB 34F1 DBBF 3559 2A6D]
---


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users