[Snort-users] Autoblock on Linux

Lionel Fairon lfairon at ...6567...
Fri Aug 9 07:06:02 EDT 2002


Hi,

We are evaluating snort/mysql/acid as alternative of commercial NIDS.

    - which tool may i use for autoblock abnormal sessions ? (Like ISS
RSKill, or Cisco TCPReset,..)
    - Rules upgrade after fine-tuning : how can i easy add new signatures
without erasing my config ?

Thanks for help,

Lionel Fairon






More information about the Snort-users mailing list