[Snort-users] Snort and VPN

Matt Kettler mkettler at ...4108...
Mon Feb 16 15:35:04 EST 2004

At 05:47 PM 2/16/2004, Bala Ayres wrote:
>Whenever i start up snort in any of the 3 modes it
>seems to block any inbound traffic on port 80 (http) .
>Yahoo IM seems to work but i am unable to browse. I
>also have a VPN connection into work which seems to be
>affected as well (i can't read email etc.)

That's generaly impossible... a normal build of snort _cannot_ block 
packets.. it has no ability to do so.

Are you using a flexresp enabled build of snort? snort-inline? snortsam?

If all three are no, then you've got some other problems.

Perhaps the pcap library you have is somehow incompatible with your setup?

More information about the Snort-users mailing list