Fw: [Snort-inline-users] React Keyword and Msg not displaying on IE6

[Alfredo O. <ao...@tu...>]

Have been trying to get the flexresp page to paint without success. From my
tests it does not work on WinXP (IE6 or Firefox) but it does in Knoppix. Any
ideas/thoughts? Many thanks....Alfredo


----- Original Message ----- 
From: "Alfredo Osorio" <ao...@tu...>
To: "Will Metcalf" <wil...@gm...>
Cc: <sno...@li...>
Sent: Thursday, April 27, 2006 9:58 PM
Subject: Fw: [Snort-inline-users] React Keyword and Msg not displaying on
IE6


> Hi Will.... I just loaded ethereal and repeated the test on a windows xp
> machine. Ethereal did capture several tcp packets with the flexresp block
> message. The IE6 client, however, did not display them. 5 packets are sent
> from snort_inline to the client with the flexresp message.
>
> packet (1) [tcp retransmission] Continuation or non-http traffic
> packets (2-4) [tcp acked lost segement] Continuation or non-http traffic
>
> Any thoughts?
>
> thanks....Alfredo
>
>
> ----- Original Message ----- 
> From: "Alfredo Osorio" <ao...@tu...>
> To: "Will Metcalf" <wil...@gm...>
> Cc: <sno...@li...>
> Sent: Wednesday, April 26, 2006 11:09 PM
> Subject: Re: [Snort-inline-users] React Keyword and Msg not displaying on
> IE6
>
>
> > Thanks Will....I'm pretty sure the page is being sent back but will
double
> > check tomorrow. Here's a little more detail on what I did...
> >
> > (1) Set up two test clients - one with knoppix and one with Windows XP
> > (2) The Knoppix client running firefox works flawlessly - flexresp page
is
> > displayed without problems.
> > (3) The Windows XP client running IE6, however, either hangs (i.e.
> > connecting...) when the rule uses DROP or repaints with "server not
found"
> > when using REJECT.
> >
> > I will load ethereal on the Windows machine tomorrow and check for
traffic
> > but my guess is that is the page is being sent back but somehow IE6 is
> > deciding not to repaint.....Regards,...Alfredo
> >
> >
> >
> >
> > ----- Original Message ----- 
> > From: "Will Metcalf" <wil...@gm...>
> > To: "Alfredo Osorio" <ao...@tu...>
> > Cc: <sno...@li...>
> > Sent: Wednesday, April 26, 2006 10:32 PM
> > Subject: Re: [Snort-inline-users] React Keyword and Msg not displaying
on
> > IE6
> >
> >
> > > errrr what do you get? nothing at all?  if watch the traffic via
> > > tcpdump is it sending the page back to the client?
> > >
> > > Regards,
> > >
> > > Will
> > >
> > > On 4/26/06, Alfredo Osorio <ao...@tu...> wrote:
> > > >
> > > >
> > > >
> > > > Hello Everyone...(My apologies as I sent this note before from a
> > non-member
> > > > email address - my work address)
> > > >
> > > > I'm currently running snort_inline.2.4.4-final with clamav and
> flexresp
> > on
> > > > my home network. Everything works really well with one interesting
> > exception
> > > > - when using "react:block,msg" to block access to inappropriate web
> > sites
> > > > the warning message only appears if one is using mozilla or
conqueror
> > but
> > > > not on IE6.  I have tried "drop", "rejectboth", "rejectsrc",
> "rejectdst"
> > and
> > > > even "alert" with the same results. Has anyone encountered this
> problem?
> > I'm
> > > > new to Linux and would welcome any
> > > > thoughts/ideas....Regards,....Alfredo
> > > >
> > > >
> > >
> > >
> > > -------------------------------------------------------
> > > Using Tomcat but need to do more? Need to support web services,
> security?
> > > Get stuff done quickly with pre-integrated technology to make your job
> > easier
> > > Download IBM WebSphere Application Server v.1.0.1 based on Apache
> Geronimo
> > >
> >
>
http://sel.as-us.falkag.net/sel?cmd_______________________________________________
> > > Snort-inline-users mailing list
> > > Sno...@li...
> > > https://lists.sourceforge.net/lists/listinfo/snort-inline-users
> >
>