[connect24h:04133] FYI:snortsam=snort + FW-1 プラグイン

[hamamoto <r00t@xxxxxxxxxxx>]

はまもとです。

そゆもの。
http://www.snortsam.net/
SnortSam is a plugin for Snort, an open-source light-weight
Intrusion Detection System (IDS). The plugin allows for automated
blocking of IP addresses on a Checkpoint Firewall-1 firewall.

・White-list support of IP addresses that will never be blocked. 
・Time-override list. 
・Flexible blocking specification including rule dependent blocking time interval. 
・Misuse/Attack detection engine that works in conjunction with... 
・...rollback support. SnortSam keeps track of blocks and can unblock the last x blocks. 
・Repetitive (same IP) block prevention within 10 sec window to improve performance. 
・TwoFish encrypted communication between Snort and the SnortSam agent. 

+---------------------------------------------------------------------
| はまもと
| ■セキュリティスタジアム 2001 ボランティア募集
| http://sec-stadium.hawkeye.ac/
| ■常時接続の宴（インターネット常時接続ニュースサイト）
| http://cn24h.hawkeye.ac/
| ■24 時間常時接続メーリングリスト開催中
| http://cn24h.hawkeye.ac/connect24h.html
| ■セカンダリDNS互助会
| http://cn24h.hawkeye.ac/dns.html 
+----------------------------------------------------------------------


------------------------------------------------------------------------
　　　　　こんなの本当の自分じゃない！心機一転出なおす！！　　　　　　
  http://job.infoseek.co.jp/JobTop?pg=job_top.html&sv=SJ&svx=971122