[Snort-users] IP Blacklisting for Snort 2.8.4.1

Jason Haar Jason.Haar at ...294...
Wed May 13 19:40:25 EDT 2009


Martin Roesch wrote:
> Hi everyone,
>
> I wrote a patch for Snort 2.8.4.1 that implements IP blacklisting as a
> preprocessor in Snort over this past weekend.  We talked about this
> last week on the mailing list in regards to trying to implement
> blacklisting using regular Snort rules and how well that doesn't work.
> :)
>
>   
Cool. Hey Marty - are you gonna add RBL lookups next?  ;-) (I'm
kidding!, I'm kidding!)

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1





More information about the Snort-users mailing list