[Snort-users] Snort ---- Not Blocking Connection
rstryker at ...7794...
Fri Jan 3 06:04:02 EST 2003
I don't think SNORT is capable of shutting down connections. It is just an observer to the network traffic. Aren't you looking for a Firewall solution that corresponds with an IDS in order to shutdown specific traffic as it occurs?
From: Atul Shrivastava [mailto:atulsh at ...7851...]
Sent: Thursday, January 02, 2003 11:34 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Snort ---- Not Blocking Connection
I have compiled snort with Flexresp and made rules such that if a rule is met then rest: rst_all ...... but snort is not blocking connection... It is detecting rule and generating alerts but can't block the connection. Can anyone solve my problem. I want to know how can I block certain connection detected by my snort sensor.
Thanks in advance.
Regards and have a nice day,
Info Structure Services
HCL INFOSYSTEMS LTD.
E - 4,5,6 Sector XI,
Noida - 201301
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users