Snort mailing list archives
snort act as IPS
From: amin Salehi <seyedamin_salehi () yahoo com>
Date: Mon, 12 Nov 2012 00:02:47 -0800 (PST)
hi. 1-for snort to act as IPS whether the IPS host(host that snort install on it) must be a hop en route(act as a router) or can be a bridge or both? 2-when snort act as IPS that act as router(decrease TTL) when i use afpacket whether ipv4 forwarding must be enabled or afpacket do the forwarding job itself? 3-what is the relationship between snort act as IPS and iptables?whether snort instruct iptables to block traffic or snort do the blocking job itself? 4-whether promisc mode on 2 interface of IPS must be enabled?
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_nov
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort act as IPS amin Salehi (Nov 12)