projects / fwsnort.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 619d782) | patch
Added --icmp-type 'any' (with capabilities test)
authorMichael Rash <mbr@cipherdyne.org>
Sat, 28 Apr 2012 18:23:56 +0000 (14:23 -0400)
committerMichael Rash <mbr@cipherdyne.org>
Sat, 28 Apr 2012 18:23:56 +0000 (14:23 -0400)
commit562e3acb0afbef722bdfa12ec69cea3d09b1881e
treec99241fa95d35d2110a8037923aa845d661678cftree | snapshot
parent619d7820e7546e247b9232a3b527cb86009315f2commit | diff
Added --icmp-type 'any' (with capabilities test)

Bug fix for recent versions of iptables (such as 1.4.12) where the icmp
match requires --icmp-type to be set - some Snort rules look for a string
to match in icmp traffic, but don't also specify an icmp type.
ChangeLog diff | blob | history
fwsnort diff | blob | history
fwsnort: Application Layer IDS/IPS with iptables