* Iptables and snort inline
@ 2005-06-09 9:04 lmarcilly
2005-06-09 16:24 ` Matin Tamizi
0 siblings, 1 reply; 2+ messages in thread
From: lmarcilly @ 2005-06-09 9:04 UTC (permalink / raw)
To: netfilter
Hi all!
I try to use iptables with snort_inline on a bridging firewall. Here is my testing configuration :
------ ----------
| PC |---------| Bridge |--------- LAN
------ ----------
192.168.1.99 192.168.1.185 192.168.1.0/24
My iptables rules are :
iptables -A INPUT -j QUEUE
ipatbles -A OUTPUT -j QUEUE
iptables -A FORWARD -j QUEUE
and snort_inline is initialized correctly.
My problem is : when i put snort_inline down, i can't reach the LAN from my PC. I think it's normal but i want that when snort inline is down, the LAN is always reachable from my PC.
Is this possible only by changing rules ? Or does it exist a patch to apply to iptables ?
Thanks in advance and excuse me for my poor english!
L. M.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Iptables and snort inline
2005-06-09 9:04 Iptables and snort inline lmarcilly
@ 2005-06-09 16:24 ` Matin Tamizi
0 siblings, 0 replies; 2+ messages in thread
From: Matin Tamizi @ 2005-06-09 16:24 UTC (permalink / raw)
To: lmarcilly@aressi.fr; +Cc: netfilter
Why are you queueing OUTPUT traffic?
-Matin
On 6/9/05, lmarcilly@aressi.fr <lmarcilly@aressi.fr> wrote:
> Hi all!
>
> I try to use iptables with snort_inline on a bridging firewall. Here is my testing configuration :
>
> ------ ----------
> | PC |---------| Bridge |--------- LAN
> ------ ----------
> 192.168.1.99 192.168.1.185 192.168.1.0/24
>
> My iptables rules are :
>
> iptables -A INPUT -j QUEUE
> ipatbles -A OUTPUT -j QUEUE
> iptables -A FORWARD -j QUEUE
>
> and snort_inline is initialized correctly.
>
> My problem is : when i put snort_inline down, i can't reach the LAN from my PC. I think it's normal but i want that when snort inline is down, the LAN is always reachable from my PC.
>
> Is this possible only by changing rules ? Or does it exist a patch to apply to iptables ?
>
> Thanks in advance and excuse me for my poor english!
>
> L. M.
>
>
>
>
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-06-09 16:24 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-06-09 9:04 Iptables and snort inline lmarcilly
2005-06-09 16:24 ` Matin Tamizi
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox