Snort mailing list archives
Re: Blocking Psiphon
From: Y M via Snort-sigs <snort-sigs () lists snort org>
Date: Sun, 1 Apr 2018 14:28:10 +0000
Psiphon, and other VPN-like apps have OpenAppID defined. You can use these AppIDs to block their associated traffic. Here is a recent pfsense and AppID video/tutorial. https://youtu.be/-GgqYq5-EBg Note: the video is not mine, all credits go to the presenter. _____________________________ From: Syed Anas via Snort-sigs <snort-sigs () lists snort org> Sent: Sunday, April 1, 2018 5:19 PM Subject: [Snort-sigs] Blocking Psiphon To: <snort-sigs () lists snort org> Hey ! I am using snort on my pfsense and i want to block Psiphon and all vpn tunneling devices.Can snort do that for me ?
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists snort org https://lists.snort.org/mailman/listinfo/snort-sigs Please visit http://blog.snort.org for the latest news about Snort! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
Current thread:
- Blocking Psiphon Syed Anas via Snort-sigs (Apr 01)
- Re: Blocking Psiphon Y M via Snort-sigs (Apr 01)