snort-inline-users

[Snort-inline-users] React Keyword and Msg not displaying on IE6

[Alfredo O. <ao...@tu...>]

Hello Everyone...(My apologies as I sent this note before from a =
non-member email address - my work address)

I'm currently running snort_inline.2.4.4-final with clamav and flexresp =
on my home network. Everything works really well with one interesting =
exception - when using "react:block,msg" to block access to =
inappropriate web sites the warning message only appears if one is using =
mozilla or conqueror but not on IE6.  I have tried "drop", "rejectboth", =
"rejectsrc", "rejectdst" and even "alert" with the same results. Has =
anyone encountered this problem? I'm new to Linux and would welcome any =
thoughts/ideas....Regards,....Alfredo

Re: [Snort-inline-users] React Keyword and Msg not displaying on IE6

[Will M. <wil...@gm...>]

errrr what do you get? nothing at all?  if watch the traffic via
tcpdump is it sending the page back to the client?

Regards,

Will

On 4/26/06, Alfredo Osorio <ao...@tu...> wrote:
>
>
>
> Hello Everyone...(My apologies as I sent this note before from a non-memb=
er
> email address - my work address)
>
> I'm currently running snort_inline.2.4.4-final with clamav and flexresp o=
n
> my home network. Everything works really well with one interesting except=
ion
> - when using "react:block,msg" to block access to inappropriate web sites
> the warning message only appears if one is using mozilla or conqueror but
> not on IE6.  I have tried "drop", "rejectboth", "rejectsrc", "rejectdst" =
and
> even "alert" with the same results. Has anyone encountered this problem? =
I'm
> new to Linux and would welcome any
> thoughts/ideas....Regards,....Alfredo
>
>

Re: [Snort-inline-users] React Keyword and Msg not displaying on IE6

[Alfredo O. <ao...@tu...>]

Thanks Will....I'm pretty sure the page is being sent back but will double
check tomorrow. Here's a little more detail on what I did...

(1) Set up two test clients - one with knoppix and one with Windows XP
(2) The Knoppix client running firefox works flawlessly - flexresp page is
displayed without problems.
(3) The Windows XP client running IE6, however, either hangs (i.e.
connecting...) when the rule uses DROP or repaints with "server not found"
when using REJECT.

I will load ethereal on the Windows machine tomorrow and check for traffic
but my guess is that is the page is being sent back but somehow IE6 is
deciding not to repaint.....Regards,...Alfredo




----- Original Message ----- 
From: "Will Metcalf" <wil...@gm...>
To: "Alfredo Osorio" <ao...@tu...>
Cc: <sno...@li...>
Sent: Wednesday, April 26, 2006 10:32 PM
Subject: Re: [Snort-inline-users] React Keyword and Msg not displaying on
IE6


> errrr what do you get? nothing at all?  if watch the traffic via
> tcpdump is it sending the page back to the client?
>
> Regards,
>
> Will
>
> On 4/26/06, Alfredo Osorio <ao...@tu...> wrote:
> >
> >
> >
> > Hello Everyone...(My apologies as I sent this note before from a
non-member
> > email address - my work address)
> >
> > I'm currently running snort_inline.2.4.4-final with clamav and flexresp
on
> > my home network. Everything works really well with one interesting
exception
> > - when using "react:block,msg" to block access to inappropriate web
sites
> > the warning message only appears if one is using mozilla or conqueror
but
> > not on IE6.  I have tried "drop", "rejectboth", "rejectsrc", "rejectdst"
and
> > even "alert" with the same results. Has anyone encountered this problem?
I'm
> > new to Linux and would welcome any
> > thoughts/ideas....Regards,....Alfredo
> >
> >
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>
http://sel.as-us.falkag.net/sel?cmd_______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users