Snort mailing list archives

Re: Move snort to IPS


From: Crusty Saint <saintcrusty () gmail com>
Date: Mon, 21 Mar 2011 09:55:26 +0100

Unfortunately this is not offering the same flexibility as snortsam, which i
hope to use in a lab to steer/complement a checkpoint firewall.



2011/3/12 Russ Combs <rcombs () sourcefire com>



On Sat, Mar 12, 2011 at 11:26 AM, Michael Lubinski <
michael.lubinski () gmail com> wrote:

I would like to transition my snort instance from a hubbed out IDS
instance to a inline IPS. Is snort_inline the only way to do this or does
snort have it built in?


Snort 2.9.0.X can do this in a variety of ways.  Check the DAQ tarball
README and the Snort tarball README.daq to get started.



------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-- 
- - -
Security Engineer - Tags: Analyst Systems Security Linux Firewall Network
Web Troubleshooting - If you think I deserve a rant, write me off-list
------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: