Re: [Snort-inline-users] snort-inline: netfilter (firewalling) support

[die t. <rei...@fh...>]

On Thursday 17 June 2004 16:54, Maetzky, Steffen (Extern) wrote:
> Hi,
>
> I read an installation guide (Snort 2.0 Intrusion Detection, chapter 12)for
> RedHat8 (Kernel 2.4.18-14)
> which says that it is nessecary to configure and recompile the kernel with
> the following options to get snort-inline to work properly:
>
> Code Maturity Level Options:
> -Prompt for Development and/or incomplete code/drivers
>
> Network Options:
> -Network packet filtering (replaces ipchains)
> -IP:Netfilter configuration:
> 	-All Options	<----------------------------------------
> really all???
> -802.1d Ethernet Bridging
> -Netfilter (firewalling) support
hi,

nope, you dont really need all.

the one you need is: 
networking options -> network packet filtering (replaces ipchains)

this option enables a bit more down an oter option:
	ip netfilter configuration ->
		there you need all the normal modules, for filtering...
		and at least for snort_inline you need the user space queueing module.

hth
buzz