Snort mailing list archives
RE: Inline difficulties:
From: "Paul Melson" <pmelson () gmail com>
Date: Fri, 27 Jan 2006 11:02:52 -0500
-----Original Message----- Subject: [Snort-users] Inline difficulties:
my iptables script just issues these commands: iptables -F INPUT iptables -F OUPUT
Should be: iptables -F OUTPUT
iptables -F FORWARD iptables -A INPUT -i lo -j ACCEPT
Add: iptables -A OUTPUT -i lo -j ACCEPT
iptables -A INPUT -j QUEUE iptables -A FORWARD -j QUEUE iptables -A OUPUT -j QUEUE
Should be: iptables -A OUTPUT -j QUEUE
I call snort like this: snort -Q \ -l /var/log/snort -c /etc/snort/snort.conf
Looks OK. What version? Did you build it by hand with './configure --enable-inline' ? PaulM ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Inline difficulties: tekbot (Jan 23)
- RE: Inline difficulties: Paul Melson (Jan 27)
- <Possible follow-ups>
- Re: Inline difficulties: Will Metcalf (Jan 23)