Clik here to view.
Snort_inline updated to 2.6.1.4 in SVN
After moving, which went fine, I now finally have some real coding time again. The last week I have been updating and fixing various parts of Snort_inline. The most important change was the update to...
View ArticleClik here to view.
Vuurmuur NFQUEUE support
Vuurmuur supported the QUEUE target for a while already, even though it needed a little bit of a hack to handle the state. This is because the iptables ruleset Vuurmuur creates is quite simple: after a...
View ArticleClik here to view.
Compiling Snort_inline with NFQUEUE support on Ubuntu
I needed to setup the right libraries for Snort_inline development on my fresh Ubuntu Feisty installation, so I decided to write down the procedure for those who think compiling Snort_inline from...
View ArticleClik here to view.
Vuurmuur developments
Last weeks I’ve spend many hours on my Vuurmuur Firewall project. First I’ve been improving the code to prepare for a new release. I’ve added NFQUEUE support to Vuurmuur, so I could use it with...
View ArticleClik here to view.
Multiple Snort_inline processes with Vuurmuur
One of the cool things of the Snort_inline project is the support for NFQUEUE. NFQUEUE is the new queuing mechanism to push packets from the kernel to userspace so a userspace program can issue a...
View ArticleClik here to view.
Improving Snort_inline’s NFQ performance
When using Snort_inline with NFQ support, it’s likely that at some point you’ve seen messages like these on the console: packet recv contents failure: No buffer space available. When the messages are...
View ArticleClik here to view.
Snort_inline load balancing
Dave Remien of NitroSecurity created a patch that “implements a relatively simple form of (IPV4) load balancing” between multiple Snort_inline processes using Nfqueue. Here is what it does: 1. Load...
View Article