Re: [Snort-inline-users] Snort-inline not seeing packets?

[Richard C. <ric...@gm...>]

Thanks William,
That worked like a charm.  One more thing (for now :).  It looks like
every packet that comes across the bridge is showing this message on
my console:
"nf_hook: Verdict = QUEUE."
Any way I can stop this?

Thanks in advance,
Rich Compton


On Tue, 15 Feb 2005 18:08:39 -0600, William Metcalf
<Wil...@kc...> wrote:
>  
> 
> oops, lets try that again.....
>  
> --------------------------------------begin-script---------------------------------------------
>  #!/bin/sh
>  
>  brctl addbr br0
>  ifconfig eth1 0.0.0.0 up -arp
>  ifconfig eth2 0.0.0.0 up -arp
>  brctl addif br0 eth1
>  brctl addif br0 eth2
>  brctl stp br0 off
>  ifconfig br0 0.0.0.0 up
>  
>  modprobe ip_queue
>  modprobe ipt_LOG
>  
>  ### Support for connection tracking of FTP and IRC.
>  modprobe ip_conntrack_ftp
>  modprobe ip_conntrack_irc
>  
>  iptables -A INPUT -i eth0 -j ACCEPT
>  iptables -A INPUT -i lo -j ACCEPT
>  
>  iptables -A FORWARD -j QUEUE
> -----------------------------------------end-script-----------------------------------
>