From owner-freebsd-questions Wed Jan 16 13:59:26 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mail.dra.com (mail.dra.com [192.65.218.159]) by hub.freebsd.org (Postfix) with ESMTP id 7139B37B405 for ; Wed, 16 Jan 2002 13:59:24 -0800 (PST) Received: from stlmail.dra.com (stlmail.dra.com [192.65.218.119]) by mail.dra.com (8.9.1/8.9.1) with ESMTP id PAA25973 for ; Wed, 16 Jan 2002 15:59:23 -0600 (CST) Received: by stlmail.dra.com with Internet Mail Service (5.5.2653.19) id ; Wed, 16 Jan 2002 15:59:08 -0600 Message-ID: From: Eric Six To: freebsd-questions@FreeBSD.ORG Subject: Blocking hosts in realtime via an IDS Date: Wed, 16 Jan 2002 15:59:08 -0600 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Is there a way in realtime to take attacks logged by snort and have a bsd machine block that host? ie blackhole the host from all responses. Linux has this functionality with iptables... Cheers, Eric -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use iQA/AwUBPEX3gMbzOHaBcCrEEQJCUgCg0HFC1z5QG0gPp+TyG7/kqykVWEEAoOaY Zx+mnxRihiDEVtes1pm2ivXS =DQ4o -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message