Snort is passive, therefore it does not defaulty block anything it merely alerts upon the ruleset you have setup.
Snort-Inline can work in a more active mode. -Dan On Mon, 15 Sep 2003, Jason Bethune wrote: > Snort is one tool used by alot of IT guys to block file sharing programs. > THe trouble with these programs is that they have built in port "movers" > that will scan the local network to find an available port to work on. > Scripting is one way to do it....but that mostly just alerts you to the fact > that there is traffice being used on your network for file sharing. I would > like to know an exact way to block file sharing as well... > > > Jason Bethune > > > > IT Specialist > > Town of Kentville > > 354 Main Street > > Kentville, NS > > B4N 1K6 > > > > www.town.kentville.ns.ca > > > > _____ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Johnson, Mark > Sent: Monday, September 15, 2003 1:37 PM > To: [EMAIL PROTECTED] > Subject: [Full-Disclosure] Blocking Music Sharing. > > > Due to the legal issues, I am trying to block access to sites like Kazaa and > Limewire in the office. If I am not mistaken, these networks can use > different ports each time, so there is no way to block it at the firewall. > Is this right? And if so, what is the best way to block access to these > types of sites? > > Many thanks, > Mark J. > -Daniel Uriah Clemens Esse quam videra (to be, rather than to appear) -Moments of Sorrow are Moments of Sobriety http://www.birmingham-infragard.org | 2053284200 fingerprint: EDF0 6566 2A4A 220E 5760 EA1F 0424 6DF6 F662 F5BD _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
