Re: SYN Proxy

[Matt Kettler <mkettler () evi-inc com>]

Xavier Cabrera wrote:
> Anyone know how snort can work like a Syn Proxy in inline mode?

Not that I'm aware of.. Ultimately I think you'll have to do this in two stages, 
something like this:

PC -> syn proxy -> snort inline -> Internet

You might be able to wrap it all up on the same box by using two interfaces and 
have the proxy tool running on the inside interface, and then inline snort on 
the outside.


Something like this:

inside interface ->syn proxy -> OS routing -> snort inline -> outside interface

        

but I'm not up-to-speed on all the syn proxy tools out there, or snort's current 
inline support.


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users