Snort mailing list archives

Outbound Information Filter?


From: "Ratty" <Ratty () SocketPimps Net>
Date: Sun, 14 Sep 2003 18:45:03 -0500

Hey guys, Im looking for information. I was told snort could fill my need
for an outbound packet filter, and im interested to know if it can do what
im looking for, and how to go about implimenting rules to do this. I have an
old FreeBSD box that i run as a router/firewall (routed/ipfw) and im
wondering if there are rules for snort i can use that will drop outbound
packets (or replace information in them) if they contain certain data, such
as a phone number or credit card number. Just to filter outbound information
to thwart any unintentional transmission of data. Can snort do this, and
what would be an example rule to replace all packets that contain
123-456-7890 with another phone number such as 321-654-0987.

Thanks for your time,

R



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: