1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-18 03:46:03 +00:00
freebsd-ports/security/snort_inline/pkg-message
Pav Lucistnik fbd9f71d63 An inline IPS system based on snort using ipfw.
PR:		ports/81378
Submitted by:	Nick Rogness <nick@rogness.net>
2005-05-28 11:06:39 +00:00

25 lines
737 B
Plaintext

***********************************
* !!!!!!!!!!! WARNING !!!!!!!!!!! *
***********************************
snort_inline uses rcNG startup scripts and must be enabled via /etc/rc.conf
Available variables:
snort_enable (bool): Set to YES to enable snort
Default: NO
snort_flags (str): Extra flags passed to snort
Default: -Dq -J 8000
snort_interface (str): Network interface to sniff
Default: ""
snort_conf (str): Snort configuration file
Default: ${PREFIX}/etc/snort_inline.conf
Also, make sure that your kernel is compiled with:
options IPFIREWALL
options IPDIVERT
The default divert port is 8000. See http://freebsd.rogness.net/snort_inline
for more information.