Re: Snort-inline not letting 80 traffic out

["snort user" <snort.user () gmail com>]

Do you have stream4 and stream4_reassemble turned on.
Turn those preprocessors off and check if you can connect to port 80
thru the box
If you can then, the problem is with the way streams is configured and
your network set up.

Does traffic in both directions pass thru the snort-inline box ?

If not, then you could add 'asynchronous_link' config option to the
stream4 preprocessor line and check.






On 8/12/06, Mike Montgomery <mmontgomery () c3bb com> wrote:
> Tried that, still nothing.  I can't do anything but ping it seems, tried ftp
> and telnet with no avail either :(
>
> Mike
>
>
> On 8/11/06, Will Metcalf < william.metcalf () gmail com> wrote:
> > try setting
> >
> > config checksum_mode: none
> >
> > Regards,
> >
> > Will
> >
> >
> >
> > On 8/11/06, Mike Montgomery <mmontgomery () c3bb com > wrote:
> >
> > >
> >
> >
> > Ok, I have snort-inline configured and running, I did a standard iptables
> -A FORWARD -j QUEUE to pass all traffic.  2 nics, eth0 and eth1 are 0.0.0.0
> with br0 with a IP.  From my pc behind snort box, I can ping by name or ip.
> But cannot pass web traffic via web browser.  If I turn off the snort and
> flush the iptables, I can pass traffic normally thru the bridge.  What have
> I done wrong?
> > Thanks
> >
> >
> > --
> > Mike Montgomery
> > Network Administrator
> > Tower Climbing & Rescue
> >
> > Citizens Communications
> > Broadband & Tower Service
> -------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services, security?
> > Get stuff done quickly with pre-integrated technology to make your job
> easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
> --
> Mike Montgomery
> Network Administrator
> Tower Climbing & Rescue
>
> Citizens Communications
> Broadband & Tower Service
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users