Snort mailing list archives
RE: O.T. Question Cisco Shunning and Snort
From: "Brian Laing" <brian.laing () blade-software com>
Date: Thu, 31 Jul 2003 17:06:24 -0700
Check out http://www.iss.net/support/product_utilities/realsecure_tech_center/tech _notes/index.php It has instructions etc. on how to do this. Its for ISS realsecure but whoudl work for snort with just a few modifications. Cheers, Brian ------------------------------------------------------------------- Brian Laing CTO Blade Software Cellphone: +1 650.280.2389 Telephone: +1 650.367.9376 eFax: +1 650.249.3443 Blade Software - Because Real Attacks Hurt http://www.Blade-Software.com ------------------------------------------------------------------- -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Björn Brombach Sent: Thursday, July 31, 2003 5:53 AM To: Snort Subject: [Snort-users] O.T. Question Cisco Shunning and Snort Hi! I am currently testing with Snort an Active Responses using Guardian and Cisco PIX firewall. The Cisco PIX Firewall supports shunning, which temporarily blocks certain ip addresses. Unfortunately i wasnt able to find any detailed informations about the capabilities and all the options of shunning. I would be very happy for any hints where to find further skripts to do shunning and more details on shunning. Thanks bb ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01 /01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- O.T. Question Cisco Shunning and Snort Björn Brombach (Jul 31)
- Testers Needed: Installing an IDS on Redhat 9 Michael Steele (Jul 31)
- RE: O.T. Question Cisco Shunning and Snort Brian Laing (Jul 31)
- <Possible follow-ups>
- RE: O.T. Question Cisco Shunning and Snort Hutchinson, Andrew (Aug 01)