We have hosted the application snort reactor in order to run this application in our online workstations with Wine or directly.


Quick description about snort reactor:

A package of scripts to watch for snort alerts, change / create firewall rules to block high priority alerts, and record recent blocks. It will increase block times based on previously recorded blocks.

Features:
  • Perl script
  • Manages IPTABLES blocks based on priority 2 or higher Snort alerts
  • Can be triggered by specially marked Snort custom messages, reversing source & target for blocking purposes
  • Maintains an SQL database of recent attacks by address & increases block times based on number of attacks seen


Audience: Information Technology, Advanced End Users, System Administrators.
User interface: Command-line.
Programming Language: Perl.
Database Environment: SQLite.

Categories:
Security, Systems Administration, Firewalls

Page navigation:

©2024. Winfy. All Rights Reserved.

By OD Group OU – Registry code: 1609791 -VAT number: EE102345621.