Re: Snort-Inline with OpenBSD

[Florian]

The problem is, that the firewall MUST run with OpenBSD !!

Thanks for answers

Re: Snort-Inline with OpenBSD

[Murali Raju]

There is no support for PF. If you need in-line function for an IPS, you can
take a look at a FreeBSD/snort_inline/IPFW/divert socket solution:

http://freebsd.rogness.net/snort_inline/

The snort_inline code primarily supports Linux netfilter/libpq. Also note
that snort2pf is considered Active Response and not really an "IPS", since
it is not in-line

Cheers,

_Raju

On 9/6/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]>
wrote:
>
> Do you search for something like this?
> http://www.thinknerd.org/~ssc/wiki/doku.php?id=snort2pf
>
> -Original Message-
> From: Florian [mailto:[EMAIL PROTECTED]
> Sent: dinsdag 6 september 2005 15:20
> To: misc@openbsd.org
> Subject: Snort-Inline with OpenBSD
>
> Hello community
>
> I tried to install Snort_Inline on my OpenBSD-firewall.
> But in the ports-collection only snort is implemented.
> when I try to compile / configure the sources from
www.snort.org<http://www.snort.org>with
> --enable-inline I get an error that a "libipq.h" is missing. Its a file
> for iptables under linux.
> Now my question: Is there any way to install snort with inline
> functionality ??
>
> Please help
>
> Regards
>
>
> Florian
>
>
>
>
>
=

> A disclaimer applies to this email and any attachments.
> Refer to http://www.sparkholland.com/emaildisclaimer for the full text of
> this disclaimer.
>
>


--
May the packets be with you.

Re: Snort-Inline with OpenBSD

[Nils.Reuvers]

Do you search for something like this?
http://www.thinknerd.org/~ssc/wiki/doku.php?id=snort2pf 

-Original Message-
From: Florian [mailto:[EMAIL PROTECTED] 
Sent: dinsdag 6 september 2005 15:20
To: misc@openbsd.org
Subject: Snort-Inline with OpenBSD

Hello community

I tried to install Snort_Inline on my OpenBSD-firewall.
But in the ports-collection only snort is implemented.
when I try to compile / configure the sources from www.snort.org with
--enable-inline I get an error that a "libipq.h" is missing. Its a file
for iptables under linux.
Now my question: Is there any way to install snort with inline
functionality ??

Please help

Regards


Florian



=
A disclaimer applies to this email and any attachments. 
Refer to http://www.sparkholland.com/emaildisclaimer for the full text of this 
disclaimer.

Re: Snort-Inline with OpenBSD

[Gleydson Soares]

> Now my question: Is there any way to install snort with inline functionality
> ??
i dont know, snort inline need netfilter API.
you can to use snortsam. -> http://www.snortsam.net

Snort-Inline with OpenBSD

[Florian]

Hello community

I tried to install Snort_Inline on my OpenBSD-firewall.
But in the ports-collection only snort is implemented.
when I try to compile / configure the sources from www.snort.org with
--enable-inline
I get an error that a "libipq.h" is missing. Its a file for iptables under
linux.
Now my question: Is there any way to install snort with inline functionality
??

Please help

Regards


Florian