[Snort-users] Blocking ip's with snort blacklist

Dmitry Korzhevin dmitry.korzhevin at ...15907...
Tue Mar 26 15:29:57 EDT 2013


Yes, i mean using blacklist ip preprocessor

26.03.2013 20:28, Joel Esler пишет:
> On Mar 26, 2013, at 2:12 PM, Dmitry Korzhevin
> <dmitry.korzhevin at ...15907... <mailto:dmitry.korzhevin at ...15907...>> wrote:
>
>> Hi,
>>
>> Is there any way to block ip's using snort blacklist files on linux,
>> not iptables?
>
> Do you mean using the blacklist preprocessor?  Or do you mean something
> else?
>
> --
> *Joel Esler*
> Senior Research Engineer, VRT
> OpenSource Community Manager
> Sourcefire

Best Regards,
Dmitry

---
Dmitry KORZHEVIN
System Administrator
STIDIA S.A. - Luxembourg

e: dmitry.korzhevin at ...15907...
m: +38 093 874 5453
w: http://www.stidia.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4488 bytes
Desc: ���������������������������������� �������������� S/MIME
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130326/35e245e8/attachment.bin>


More information about the Snort-users mailing list