From: Matin Tamizi <mtamizi@gmail.com>
To: "lmarcilly@aressi.fr" <lmarcilly@aressi.fr>
Cc: netfilter@lists.netfilter.org
Subject: Re: Iptables and snort inline
Date: Thu, 9 Jun 2005 12:24:20 -0400 [thread overview]
Message-ID: <f68a41605060909246f18cb28@mail.gmail.com> (raw)
In-Reply-To: <DIIE.000001ED000023D1@smtp.aressi.fr>
Why are you queueing OUTPUT traffic?
-Matin
On 6/9/05, lmarcilly@aressi.fr <lmarcilly@aressi.fr> wrote:
> Hi all!
>
> I try to use iptables with snort_inline on a bridging firewall. Here is my testing configuration :
>
> ------ ----------
> | PC |---------| Bridge |--------- LAN
> ------ ----------
> 192.168.1.99 192.168.1.185 192.168.1.0/24
>
> My iptables rules are :
>
> iptables -A INPUT -j QUEUE
> ipatbles -A OUTPUT -j QUEUE
> iptables -A FORWARD -j QUEUE
>
> and snort_inline is initialized correctly.
>
> My problem is : when i put snort_inline down, i can't reach the LAN from my PC. I think it's normal but i want that when snort inline is down, the LAN is always reachable from my PC.
>
> Is this possible only by changing rules ? Or does it exist a patch to apply to iptables ?
>
> Thanks in advance and excuse me for my poor english!
>
> L. M.
>
>
>
>
>
prev parent reply other threads:[~2005-06-09 16:24 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-06-09 9:04 Iptables and snort inline lmarcilly
2005-06-09 16:24 ` Matin Tamizi [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=f68a41605060909246f18cb28@mail.gmail.com \
--to=mtamizi@gmail.com \
--cc=lmarcilly@aressi.fr \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox