From: Matin Tamizi <mtamizi@gmail.com>
To: "lmarcilly@aressi.fr" <lmarcilly@aressi.fr>
Cc: netfilter@lists.netfilter.org
Subject: Re: Iptables and snort inline
Date: Thu, 9 Jun 2005 12:24:20 -0400 [thread overview]
Message-ID: <f68a41605060909246f18cb28@mail.gmail.com> (raw)
In-Reply-To: <DIIE.000001ED000023D1@smtp.aressi.fr>
Why are you queueing OUTPUT traffic?
-Matin
On 6/9/05, lmarcilly@aressi.fr <lmarcilly@aressi.fr> wrote:
> Hi all!
>
> I try to use iptables with snort_inline on a bridging firewall. Here is my testing configuration :
>
> ------ ----------
> | PC |---------| Bridge |--------- LAN
> ------ ----------
> 192.168.1.99 192.168.1.185 192.168.1.0/24
>
> My iptables rules are :
>
> iptables -A INPUT -j QUEUE
> ipatbles -A OUTPUT -j QUEUE
> iptables -A FORWARD -j QUEUE
>
> and snort_inline is initialized correctly.
>
> My problem is : when i put snort_inline down, i can't reach the LAN from my PC. I think it's normal but i want that when snort inline is down, the LAN is always reachable from my PC.
>
> Is this possible only by changing rules ? Or does it exist a patch to apply to iptables ?
>
> Thanks in advance and excuse me for my poor english!
>
> L. M.
>
>
>
>
>
prev parent reply other threads:[~2005-06-09 16:24 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-06-09 9:04 Iptables and snort inline lmarcilly
2005-06-09 16:24 ` Matin Tamizi [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=f68a41605060909246f18cb28@mail.gmail.com \
--to=mtamizi@gmail.com \
--cc=lmarcilly@aressi.fr \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.