From: "Gary" 

We ar in the process of evaluating this currently:

http://shopip.com/index.html

It uses Snort rules and dynamically blocks & reports attacks. It runs
on BSD and no knowedge of unis is needed (web interface) So far it seems to
be a very cool device and was developed by one of our clients.


"Jan van Hoek (NL)"  wrote in
message news:VA.00000191.005d4b21{at}xs4alldot.nl...
> >> can it do anything useful like
> >> dynamically adjust filters
> >> to block attacking sources?
>
> The short answer is NO. Consider Snort as being just a highly
> specialized network sniffer. It just listens, and it records and
> analyses the traffic, no more no less.
>
> OTOH I know of ISS Realsecure that it can communicate with the
> firewall, and let the firewall take action. I do not know whether
> Snort can do something like that.
>
> IAC the firewall is in the right position for traffic blocking,
> since all data communications go right through it. This it not the
> case for a sniffer like device (like Snort or any other IDS) that
> just watches the traffic passing by.
>
>  -- Jan van Hoek (NL)
>  -- Thu, 17 Oct 2002 02:28 CET
>
>

--- BBBS/NT v4.01 Flag-4