[Snort-users] Snort ---- Not Blocking Connection

Rich Stryker rstryker at ...7794...
Fri Jan 3 06:04:02 EST 2003

I don't think SNORT is capable of shutting down connections. It is just an observer to the network traffic. Aren't you looking for a Firewall solution that corresponds with an IDS in order to shutdown specific traffic as it occurs?
-----Original Message-----
From: Atul Shrivastava [mailto:atulsh at ...7851...]
Sent: Thursday, January 02, 2003 11:34 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Snort ---- Not Blocking Connection
Importance: High
Hello All,
I have compiled snort with Flexresp and made rules such that if a rule is met then rest: rst_all ...... but snort is not blocking connection... It is detecting rule and generating alerts but can't block the connection. Can anyone solve my problem. I want to know how can I block certain connection detected by my snort sensor.
Thanks in advance.

Regards and have a nice day,
                           Atul Shrivastava
                           Info Structure Services
                           HCL INFOSYSTEMS LTD.
                           E - 4,5,6 Sector XI,
                           Noida - 201301
                           Tel: 91-120-2526910,2443013
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030103/a65f9378/attachment.html>

More information about the Snort-users mailing list