Snort mailing list archives
Block Conncection
From: Atul Shrivastava <atul_iet () yahoo com>
Date: Fri, 6 Dec 2002 23:20:38 -0800 (PST)
Hi,
Can anyone tell me how can we block certain connection, let sat that I want to block every connection for telnet that
uses username "root"
Can anybody give me the rule. This will illustrate me the use of "react" keyword. I know that this keywork works with
three modes: 1. Block the source 2. Block the Destination 3. Block both of them.
I have also used them but not get the desired result. Please tell me the required and efficient rule if somebody has
tested it fully.
Thnaks in advance.
Regards and have a nice day,
Atul Shrivastava
"Coelho,_Wagner" <tellnet () terra com br> wrote:staff I am using snortcenter+acid and would like to know as to block
the invasion attempts, because so far I only obtain to logar they. Thanks.
Regards and have a nice day,
Atul Shrivastava
---------------------------------
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now
Current thread:
- to block intruders Coelho, Wagner (Dec 05)
- Re: to block intruders Alberto Gonzalez (Dec 05)
- Block Conncection Atul Shrivastava (Dec 07)
- How to use the Various Outplugins present in the SnortCenter Atul Shrivastava (Dec 07)
- Re: How to use the Various Outplugins present in the SnortCenter Alberto Gonzalez (Dec 07)
- Re: Block Conncection Alberto Gonzalez (Dec 07)
- How to use the Various Outplugins present in the SnortCenter Atul Shrivastava (Dec 07)
