[Snort-users] blocking

Martin Forest martin at ...4069...
Thu May 16 21:03:04 EDT 2002


If you are using iptables you can setup a rule with content checking in 
iptables.
/Martin

Ganu Skop wrote:

>hi all,
>i believe this thought has been posted before.
>anyway, what i'm looking is to block all the "cmd.exe"
>coming to my network. i've heard guardian works fine
>with ipchain , and snortsam with pix. 
>is there any utility / script that works with ipf or
>pf ?
>thanks
>
>
>=====
>//skopganu
>
>__________________________________________________
>Do You Yahoo!?
>LAUNCH - Your Yahoo! Music Experience
>http://launch.yahoo.com
>
>_______________________________________________________________
>
>Have big pipes? SourceForge.net is looking for download mirrors. We supply
>the hardware. You get the recognition. Email Us: bandwidth at ...382...
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>







More information about the Snort-users mailing list