Re: [Snort-users] snort inline behavior

Yes, snort_inline needs to be there all the time, otherwise
your machine is not accessible anymore.
I'm not sure about the dummy application.
ip_qeue needs to be able to serve several applications for this to work.
You can try though :-)

Stephan

> Woah. What happens when snort_inline dies or maybe when we need to
> stop/start snort_inline? Ooops.
>
> I'm guessing there is a "dummy" app that you can set up to always listen to
> the queue so this problem doesn't happen? If not I need to write one.


--
Stephan Scholz <sscholz@astaro.com> | Development
Astaro AG | www.astaro.com | Phone +49-721-490069-0 | Fax -55

Visit Astaro at:
- Infosecurity France, Paris, Nov. 26-27, 2003

Awards for ASL:
- Linux Enterprise Readers' Choice Award: Best Firewall - October 2003
- LinuxWorld Product Excellence Award: Best Security Solution - August 2003
- "Excellent" Infoworld Magazine - August 2003
- "Four Stars" SC Magazine - June 2003




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users