Fwsnort is a iptables rule set that is used to convert snort rules to an equivalent amount. By using the Iptables string-matching module, Fwsnort can detect many application-layer features in the snort rule. Fwsnort adds a hexadecimal string to the iptables option, which allows the snort rule to contain 16 characters without modifying the direct access to the Iptables rule set. In addition, Fwsnort accepts command-line arguments to limit the handling of any particular rule, and can even be restricted to detect and defend against attacks in a particular bad environment.
Fwsnort 1.6 Update Content:
-Support Fast_pattern support. -Multi-port matching support for iptables. -Enhanced--queue and--nfqueue mode. -Added connection tracking module. -Increased string matching extension via iptables, icase parameter case-insensitive pattern matching. -Fixed multiple bugs.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.