Fwsnort
This entry published by the Free Software Foundation.
fwsnort
http://www.cipherdyne.org/fwsnort/
'fwsnort' translates snort rules into an equivalent iptables ruleset. By using the iptables string match module, fwsnort detects application layer signatures which exist in many snort rules. It adds a --hex-string option to iptables, which lets users directly input snort rules that contain hex characters into iptables rulesets without modification. 'fwsnort' also uses the IPTables::Parse Perl module to (optionally) restrict the snort rule translation to only those rules that specify traffic that could potentially be allowed through an existing iptables policy.
Documentation
User manpage available in HTML format from http://www.cipherdyne.org/projects/fwknop/docs.html
Licensing
| License | Verified by | Verified on | Notes |
|---|---|---|---|
| GPLv2orlater | Janet Casey | 2453562.511 July 2005 |
Leaders and contributors
| Contact(s) | Role |
|---|---|
|
| Maintainer |
Resources and communication
| Audience | Resource type | URI |
|---|---|---|
| Developer | VCS Repository Webview | http://www.cipherdyne.org/cgi/viewcvs.cgi/fwsnort/ |
| Support | Mailing List Info/Archive | http://lists.sourceforge.net/mailman/listinfo/psad-discuss |
Software prerequisites
| Kind | Description |
|---|---|
| Weak prerequisite | IPTables_Parse |
Click here if you'd like to report a problem or make a suggestion that could
This entry (in part or in whole) was last reviewed on 7 January 2008.
Problem with this listing?
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software described in this text has its own copyright notice and license, which can usually be found in the distribution itself.
This page was last modified on 12 April 2011, at 15:56.

