2 Jun
2003
2 Jun
'03
19:00
On Mon, 2 Jun 2003 13:45:03 -0500 (CDT)
"Josh Trutwin"
As I understand it, snort is a reporting tool to detect intrusions, but not to actually prevent/block them.
Snort by default does not block attacks unless if compiled with flexresp support and with an appropriate rule set. Another option, if you want realtime blocking, is to use a utility such as guardian.pl and blockit.pl in conjunction with Snort. Charles -- linux: because a PC is a terrible thing to waste (ksh@cis.ufl.edu put this on Tshirts in '93)