OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jim Forster (jforsterrapidnet.com)
Date: Mon Jun 04 2001 - 14:58:44 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Murat,
    I don't work with IPChains, but I'm sure someone in the snort-users list
    does.
    I've forwarded it on to them for their assistance.
    Thanks!

    ----- Original Message -----
    From: "Murat Duygulutuna" <duyguluyahoo.com>
    To: <jforsterrapidnet.com>
    Sent: Monday, June 04, 2001 1:50 PM
    Subject: any question [need help]

    > Hi,
    >
    > I have to make an ipchains rule;
    > The ipchains rule DENied if a specific string[pattern]
    > match in any packet of any IP adresses.
    >
    > /* ex; if the string[pattern] is--> ^&KDLHJK4
    > the rule check all incoming packets; if It's catch
    > ^&KDLHJK4 string in a packet DENY this
    > action/IPAdress. */
    >
    > How can I do this?
    >
    > Thanks for your help.
    > murat
    > *N*x fun.
    >
    > __________________________________________________
    > Do You Yahoo!?
    > Get personalized email addresses from Yahoo! Mail - only $35
    > a year! http://personal.mail.yahoo.com/

    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    http://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users