From: Owais Bin Zuber (owais_bin_zuberhotmail.com)
Date: Mon Jan 19 2004 - 08:48:06 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,
 
I am trying to implement snort at my network. I have read many documents
regarding snort installation and configuration. All the documents tell
you that snort will detect the attack, will log it and will send an
alert to whatever is configured. The question remains that does snort
block the attack itself or leaves this to the administrator. I have read
about guardian but discussion on the mailing list revealed that using
guardian is not a good idea as it can be used as DoS tool also. My
question is that is it possible for snort to send TCP RST packet as a
response.
 
Thanks

-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]