[Snort-users] Snort inline with pf

Victor Julien lists at ...14129...
Mon Oct 15 04:42:27 EDT 2007

Алексей Кудрявцев wrote:
> Hi !!! Please help me with my question. How i can run Snort in inline
> mode with pf ? 
No you can't, as pf does not support divert sockets. You can use FreeBSD
with ipfw or Linux. Otherwise you may want to have a look at snortsam
and Snort in IDS mode with active responses enabled.


More information about the Snort-users mailing list