Re: SNort FlexResp Questions

[Rich Adamson <radamson () routers com>]

> Is anyone using the flexresp feature?  If so, how is it working?
 
I've not used it recently, but it was working in a previous release.
I think I remember someone posting something about rewriting that, and
if memory serves correctly, it was referred to as flexresp2. Not sure
where it stands though. 

> Is anyone using the flexresp feature as a URL filter.  If so, is 
> there a way to send a deny web page back to the workstation?

No, flexresp can only send RST and/or ICMP packets either to the
originating IP or to the destination IP. See the doc/README.FLEXRESP
and doc/snort_manual.pdf.




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users