Snort mailing list archives
RE: Snort ---- Not Blocking Connection
From: "Rich Stryker" <rstryker () virtuallearning net>
Date: Fri, 3 Jan 2003 09:02:52 -0500
I don't think SNORT is capable of shutting down connections. It is just an observer to the network traffic. Aren't you looking for a Firewall solution that corresponds with an IDS in order to shutdown specific traffic as it occurs? Rich -----Original Message----- From: Atul Shrivastava [mailto:atulsh () hclinsys com] Sent: Thursday, January 02, 2003 11:34 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Snort ---- Not Blocking Connection Importance: High Hello All, I have compiled snort with Flexresp and made rules such that if a rule is met then rest: rst_all ...... but snort is not blocking connection... It is detecting rule and generating alerts but can't block the connection. Can anyone solve my problem. I want to know how can I block certain connection detected by my snort sensor. Thanks in advance. Regards and have a nice day, Atul Shrivastava Info Structure Services HCL INFOSYSTEMS LTD. E - 4,5,6 Sector XI, Noida - 201301 Tel: 91-120-2526910,2443013
Current thread:
- Snort ---- Not Blocking Connection Atul Shrivastava (Jan 02)
- <Possible follow-ups>
- RE: Snort ---- Not Blocking Connection Rich Stryker (Jan 03)
- RE: Snort ---- Not Blocking Connection Rich Stryker (Jan 03)