Snort mailing list archives
Problems configuring react: msg;
From: Peter Fraser <pjfraser82 () gmail com>
Date: Wed, 26 Nov 2014 14:43:36 +1100
Hi, I have setup snort running as an IPS using NFQUEUE. I can detect rules and run block and deny on them however I cannot seem to get react to respond with a html page. here is my configure command: ./configure --enable-sourcefire --enable-open-appid --enable-react --enable-flexrsp3 I am running Snort 2.9.7.0 my rule example is: drop tcp any any -> any $HTTP_PORTS (msg:"http://www.news.com.au"; content:"news.com.au"; react: msg; sid:283; rev:1;) I have followed the docs and I am happy to accept all defaults at this stage with regard to the response but the connection still just times out regardless. Any help is greatly appreciated. Cheers Fraser
------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Problems configuring react: msg; Peter Fraser (Nov 25)
- Re: Problems configuring react: msg; Hui Cao (huica) (Nov 26)