Snort mailing list archives

Sort inline virus prevention


From: mike evans <more_hops () yahoo com>
Date: Sat, 20 Sep 2003 16:24:10 -0700 (PDT)

Sorry if this has already been aswered elsewhere. 
Anyways what I want to do is setup a box to filter
traffic(smtp,http,ftp,...) for viruses.  It looks like
signatures can be setup to check for certain things
and drop packets accordingly.  The problem is it looks
like these signatures take some investigation and time
to write and by the time the signature comes out for
the newest virus I may already be infected.    How
soon after a virus outbreak do signatures get updated
usually?  Would you recommend snort for what I'm
trying to do or should I look elsewhere?  Is there a
way to plugin antivirus software to help with the
scanning?

Thanks a lot
Mike

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: