[Snort-users] HOw to close a connection using snort.

Blake Frantz blake at ...319...
Tue Jan 23 02:43:44 EST 2001


when you ./configure, use the enable-flexresp option.  It allows you to
send RSTs and host/port/network unreachable packets based on whatever
criteria you want.

you will need to install libnet first:
http://www.packetfactory.net/libnet

hope this helps.

blake

On Tue, 23 Jan 2001, Sam Wun wrote:

> >
> 
> Hi,
> 
> When an intrustion is detected by snort, how can I use snort to close the connection?
> (like ipfilter, block return-icmp ... )
> 
> Thanks
> Sam
> 
> 





More information about the Snort-users mailing list