[Snort-users] HOw to close a connection using snort.

Sam Wun swun at ...957...
Tue Jan 23 21:46:18 EST 2001


Hi, thanks for the reply.
Do you know how to define a rule for execute it?

Sam
Blake Frantz wrote:

> when you ./configure, use the enable-flexresp option.  It allows you to
> send RSTs and host/port/network unreachable packets based on whatever
> criteria you want.
>
> you will need to install libnet first:
> http://www.packetfactory.net/libnet
>
> hope this helps.
>
> blake
>
> On Tue, 23 Jan 2001, Sam Wun wrote:
>
> > >
> >
> > Hi,
> >
> > When an intrustion is detected by snort, how can I use snort to close the connection?
> > (like ipfilter, block return-icmp ... )
> >
> > Thanks
> > Sam
> >
> >





More information about the Snort-users mailing list