Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]

[Snort-users] Iptables and snort inline

Subject: [Snort-users] Iptables and snort inline
Date: Thu, 9 Jun 2005 08:51:24 +0000
Hi all!

I try to use iptables and snort inline on a bridging firewall. This is my 
configuration for testing :

------         ----------
| PC |---------| Bridge |--------- LAN
------         ----------
192.168.1.99      192.168.1.185      192.168.1.0/24

When snort inline does not run, I can't reach the LAN. I think it's normal but 
it's not what i want. In fact, i would like that when snort inline doesn't run, 
iptables don't put packet in the queue. Like this, even if traffic isn't 
analysed by snort, i always can reach the LAN...

I can't find info in the snort user mailling list archive because source-forge 
is down for the moment so i hope you have a solution to my problem...

Is there a patch to apply to iptables in order to react when snort is down? Or 
is this only a problem in the rules?

Thanks in advance and sorry for my poor english!

L.M





-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.  How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy.  
Play to win an NEC 61" plasma display: http://www.necitguy.com/?r=20
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>