Snort mailing list archives

Re: Snort and VPN


From: Matt Kettler <mkettler () evi-inc com>
Date: Mon, 16 Feb 2004 18:34:06 -0500

At 05:47 PM 2/16/2004, Bala Ayres wrote:
Whenever i start up snort in any of the 3 modes it
seems to block any inbound traffic on port 80 (http) .
Yahoo IM seems to work but i am unable to browse. I
also have a VPN connection into work which seems to be
affected as well (i can't read email etc.)

That's generaly impossible... a normal build of snort _cannot_ block packets.. it has no ability to do so.

Are you using a flexresp enabled build of snort? snort-inline? snortsam?

If all three are no, then you've got some other problems.

Perhaps the pcap library you have is somehow incompatible with your setup?







-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: