[Snort-users] Snort as IPS

Guillaume Arcas guillaume.arcas at ...953...
Thu Apr 22 08:57:00 EDT 2004

Nicolas Saurbier a dit :

> I need an IPS, that drops Packages when they arrive. Can Snort do this
> job?

Yes, when compiled with flexresp enabled, you can embedded tags in your
rules that allow you to reset connections on different ways.


PS: do not believe all that Gartner Group said about IDS anyway... :-)

Guillaume Arcas

Il faut nous quitter. Nous sommes deux enfants,
nous avons fait une folie. (Yvonne de Galais)

More information about the Snort-users mailing list