Re: Configuring snort as IPS

[Kevin Ross <kevross33 () googlemail com>]

So you don't want it to be inline with traffic? That is needed for actual
IPS (inline dropping specific packets). However; you can use responses such
as configure snort to inject reset packets or ICMP unreachable messages to
tear down the session or use snortsam to configure your firewalls to block
the traffic. Other than that you could run it in IDS mode only and just
keep watching for attacks.

On 24 January 2012 10:09, Sandip Bankewar <sbankewar () cloudaccess com> wrote:

>  Hi,****
>
> ** **
>
> I don’t want my system to be act as gateway.****
>
> ** **
>
> What is the best way to configure snort as IPS??****
>
> ** **
>
> How can we configure?? Can anyone provide me steps??****
>
> ** **
>
> ** **
>
> Regards,****
>
> Sandip Bankewar****
>
> ** **
>
>
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!