A package of scripts to watch for snort alerts, change / create firewall rules to block high priority alerts, and record recent blocks. It will increase block times based on previously recorded blocks
Features
- Perl script
- Manages IPTABLES blocks based on priority 2 or higher Snort alerts
- Can be triggered by specially marked Snort custom messages, reversing source & target for blocking purposes
- Maintains an SQL database of recent attacks by address & increases block times based on number of attacks seen
License
BSD LicenseFollow Snort Reactor
Other Useful Business Software
Paessler: Easy to Use With Enterprise Power. Free Trial
You shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.