About:
fwsnort translates snort rules into an equivalent iptables ruleset. By making use of the iptables string match module, fwsnort can detect application layer signatures which exist in many snort rules. fwsnort adds a --hex-string option to iptables, which allows snort rules that contain hex characters to be input directly into iptables rulesets without modification. In addition, fwsnort makes use of the IPTables::Parse Perl module in order to (optionally) restrict the snort rule translation to only those rules that specify traffic that could potentially be allowed through an existing iptables policy.

Author:
Michael Rash [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
(not rated)

Homepage:
http://www.cipherdyne.org/projects/fwsnort/
Tar/GZ:
http://www.cipherdyne.org/fwsnort/download/
Tar/BZ2:
http://www.cipherdyne.org/fwsnort/download/
Changelog:
http://trac.cipherdyne.org/[..]ser/fwsnort/tags/fwsnort-1.0.5/ChangeLog
RPM package:
http://www.cipherdyne.org/fwsnort/download/
CVS tree (cvsweb):
http://trac.cipherdyne.org/trac/fwsnort
Mailing list archive:
http://lists.sourceforge.net/lists/listinfo/fwsnort-discuss
Mirror site:
http://www.cipherdyne.com/fwsnort

Trove categories: [change]

[Development Status]		3 - Alpha
[Environment]		Console (Text Based)
[License]		OSI Approved :: GNU General Public License (GPL)
[Operating System]		POSIX :: Linux
[Programming Language]		C, Perl, Unix Shell
[Topic]		System :: Logging, System :: Monitoring, System :: Networking :: Firewalls

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Default	1.0.5	22-Aug-2008	GNU General Public License (GPL)