UTM Firewall

Web Protection: Web Filtering & Application Visibility/Control How does snort_inline and squid work together?

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 2 replies
Subscribers 1 subscriber
Views 564 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How does snort_inline and squid work together?

canbobo over 21 years ago

How does snort_inline and squid work together?
snort_inline use the function of iptables:QUEUE,my question is how the iptables set to make snort_inline and transparent proxy work well.
At lease,I can not see it from command "iptables -L -v"

This thread was automatically locked due to age.

0 Xman_01 over 21 years ago

Hi,

"transparent" Squid only makes a NAT action to translate 80 to 8080.

IPS (snort) is the last filter to be passed, so packet allready went through the packetfilter and proxy (snat also?)

Best regards
Xman
Cancel
Vote Up 0 Vote Down

Cancel
0 canbobo over 21 years ago in reply to Xman_01

I know that,my question is i can not see the target QUEUE from the command "iptables -L -v",how does it happen???
snort_inline get packet from QUEUE,right???
Cancel
Vote Up 0 Vote Down

Cancel