From: Pieter V. <pv...@ab...> - 2005-08-01 15:26:44
|
Hi, I was wondering if somewhere an IPS rule set exists, i.e. with drop/reject actions instead of alert actions? The only rulesets I can find are IDS or standard snort rulesets. I also found a snortconverter script (snortconfig) but this script doesn't seem to take multiline rules into account an can only set an action to a specific other actions instead of something like change all alerts to drop rules. Does anyone now where to find such information? kind regards, Pieter Able -- NEW: aXs GUARD hands-on Trainings v.7.0 more info at http://www.axsguard.com/indextraining.htm aXs GUARD has completed security and anti-virus checks on this e-mail (http://www.axsguard.com) --------------------------------------------------- Able NV: ond.nr 0457.938.087 |