similar to: SNORT with flexresp

Hello all: I tried to install snort under /usr/ports/security and have some problems. with "make all", I checked every item on the menu but I got error messages: ////////////////////////////// laptop# make all ===> snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not incorporate cleanly. *** Error code 1 Stop in /usr/ports/security/snort.

Dear Friends, how new version wine 0.9.12 using CONFIG FILE ? Because, I used old version wine and now ladt version wine don't use more config file. Thanks Adriano

Dear Friends, I complied and installed wine version 20050830 with sucess. When I executed application windows (compiled vbbasic 6.0) the screen show incorrect characters. Please see http://www.e-alinux.com/wine_error_fonts.jpg How I configure FONTS in wine ? I done some modification .wine file, but without sucess. Thanks for help. Adriano

Dear Friends, I have process run in CENTOS 4.2 call kotfare that is using 99% CPU, it run with owner apache. I kill process KOTFARE and restart apache, after some hours this process return. I did find file with name *kotfare* and I din't find. Please, help me. Adriano

Dear Friends, I installed CENTOS 4.4 on server. I need DROP MSN Messenger using IPTABLES, I created the rule below. $IPTABLES -A INPUT -p tcp -m string --string "x-msn-messenger" -j DROP But, When I run IPTABLES, I have received follow error: DROP -> MSN Messenger iptables v1.2.11: Couldn't load match `string':/lib/iptables/libipt_string.so: cannot open shared object

Dear Friends, I insatlled qmail on CentOS 4.1 and now I need forward messages root to other user. I modified file /etc/aliases but it don't work. Thanks Adriano

Dear Friends, I installed HTB in Server Centos 4.4 and I would like verify if control HTB is it work. Are there software and show bandwidth meter per port ? Text Mode ? Thanks Adriano

>> 3. I'm intrested in blocking kazaa/P2P trafic with IPFW any help in this issue you could possibly block connections at known p2p ports. deny tcp from any to any 6699 step but most of the newer protocols use dynamic ports and in turn, are configurable. so ipfw isn't exactly ideal on it's own for this. -r. -----Original Message----- From: Pons [mailto:pons@gmx.li] Sent:

Dear Friends. The CENTOS 4 is install with locale utf-8, but I would like add locale iso-8859-1. How do you it ? Thanks Adriano Frare

Dear Friends. How are steps to compile kqemu for 0.81 on w32 ? Thanks for all messages. Adriano Frare

Dear Friends, I need RPM for CENTOS 4.5 to wxWidgets , WXGTK and ... Where I get ? Thanks Adriano

Dear Friends, How I Install CBQ in CENTOS 4.2 ? Thanks Adriano

Dear Friends, How I restart logrotate ? Because file /var/log/maillog doesn't rotate log. Thanks Adriano

Dear Friends, I have install TAP Driver NET on W2k Host with QEMU 0.72, but How I configure QEMU to use TAP DEVICE ? Thanks Adriano

Dear all, I''m setting up a new gateway for a small network (under 30 users)Gw will host the following services:shorewalldnsproxy i''m considering installing snort.can i do so on the same exact box ? is there any security risk of doing so ? box would have 4 ISPs and two internal interfaces. Any recommendation about the optimal setup of snort and shorewall (or if you suggest

I made an atempt to run snort_inline and shorewall on the same system but I could not get snort to see the packets. Maybe someone with a little more iptables knowledge could tell me what I''m doing wrong or if its possible to have the systems setup so that it places packets that the firewall would allow into QUEUE. After setting up and starting shorewall I then issue the following

hello list, i''ve set up shorewall and snort inline on a linux box. it works, but snort only sees traffic from new connections. and this is because shorewall automatically generates rules to accept established and related connections. how can i force shorewall to queue everything, so that snort can scan the hole traffic like in IDS mode. The setup i have now is really simple, just 2 zones

I figured that someone reading this list might want to take a look at the proceeding, considering that the version of Snort in FreeBSD ports -is- affected. -----Forwarded Message----- > From: CERT Advisory <cert-advisory@cert.org> > To: cert-advisory@cert.org > Subject: CERT Advisory CA-2003-13 Multiple Vulnerabilities in Snort Preprocessors > Date: 17 Apr 2003 11:30:47 -0400

Is anyone using an inline IDS like hogwash or snort-inline to drop packets in a system running shoreline? I _think_ I see how to configure it, but I''d be really interested in finding a howto or something... Thanks! Mike- -- Mornings: Evolution in action. Only the grumpy will survive. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at

Plus I would like to let you know that it works like a charm. Snort can now see those packets. -----Original Message----- From: shorewall-users-bounces@lists.shorewall.net [mailto:shorewall-users-bounces@lists.shorewall.net] On Behalf Of Thibodeau, Jamie L. Sent: Wednesday, March 30, 2005 9:25 AM To: Mailing List for Shorewall Users Subject: RE: [Shorewall-users] Shorewall and an inline