Re: IDS&Firewall

From: Massimo Ciscato (massimo.ciscato_at_pandora.be)
Date: 09/22/03

  • Next message: _at_micro$oft.com: "Re: Scripts needed for Trusted HP-UX system"
    Date: Sun, 21 Sep 2003 22:09:33 GMT
    
    

    punk wrote:

    > hi,guys
    > I need some help.
    > How can I make the IDS and Firewall cooperating .I mean automatically.
    >
    > For example,if snort detect any attack ,he can notice the firewall and
    > then firewall can automatically change the rules.
    > really thanks. bow

    Try this:

    http://www.snortsam.net/index.html

    Never tried myself, but it looks like exactly what you are looking for.

    Massimo


  • Next message: _at_micro$oft.com: "Re: Scripts needed for Trusted HP-UX system"

    Relevant Pages

    • Re: Dynamic Firewall/IDS System
      ... > (firewall, IDS, etc.) and reacting appropriately could be a good thing. ... > I don't think this is a description of snort. ... the network guys from the colo -- that they get or got attacked. ... we deploy packet filter log rules that indicate the attack. ...
      (FreeBSD-Security)
    • Re: [Full-Disclosure] IDS Signatures
      ... > firewall, so that when snort sees as attack, i ... take a look at Snortsam. ... had script, like you have now, running on Snort and a Checkpoint ...
      (Full-Disclosure)
    • RE: [Full-Disclosure] Sidewinder G2
      ... Secure Computing Sidewinder G2 Firewall Stops New High-Profile Sendmail ... Technology Prevents Sendmail Attack Warned About in CERT Advisory ...
      (Full-Disclosure)
    • RE: Thinking about Security rules...
      ... > Subject: Re: Thinking about Security rules... ... >>rules for the IDS. ... by which you attack. ... firewalls in series isn't nearly as nice as a stateful firewall coupled ...
      (Vuln-Dev)
    • Re: Can I protect myself against network attacks?
      ... > I guess that was one purpose of the attack. ... > had happened if you just used the SP2 firewall which does not warn you ... back, I've seen the firewall crash before my eyes, without warning. ... network attacks, or trojans. ...
      (comp.security.firewalls)