Difference between revisions of "Fwsnort"
(Created page with "{{Entry |Name=fwsnort |Short description=Translates snort rules into an equivalent iptables ruleset |Full description='fwsnort' translates snort rules into an equivalent iptables...") |
(New version) |
||
| Line 3: | Line 3: | ||
|Short description=Translates snort rules into an equivalent iptables ruleset | |Short description=Translates snort rules into an equivalent iptables ruleset | ||
|Full description='fwsnort' translates snort rules into an equivalent iptables ruleset. By using the iptables string match module, fwsnort detects application layer signatures which exist in many snort rules. It adds a --hex-string option to iptables, which lets users directly input snort rules that contain hex characters into iptables rulesets without modification. 'fwsnort' also uses the IPTables::Parse Perl module to (optionally) restrict the snort rule translation to only those rules that specify traffic that could potentially be allowed through an existing iptables policy. | |Full description='fwsnort' translates snort rules into an equivalent iptables ruleset. By using the iptables string match module, fwsnort detects application layer signatures which exist in many snort rules. It adds a --hex-string option to iptables, which lets users directly input snort rules that contain hex characters into iptables rulesets without modification. 'fwsnort' also uses the IPTables::Parse Perl module to (optionally) restrict the snort rule translation to only those rules that specify traffic that could potentially be allowed through an existing iptables policy. | ||
| + | |Homepage URL=http://www.cipherdyne.org/fwsnort/ | ||
|User level=none | |User level=none | ||
| − | |||
| − | |||
| − | |||
| − | |||
|Computer languages=Perl | |Computer languages=Perl | ||
|Documentation note=User manpage available in HTML format from http://www.cipherdyne.org/projects/fwknop/docs.html | |Documentation note=User manpage available in HTML format from http://www.cipherdyne.org/projects/fwknop/docs.html | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
|Keywords=conversion,snort,iptables,rule,ruleset,tranlsation,string match,--hex-string,application layer signature,IPTables::Parse Perl,hex character | |Keywords=conversion,snort,iptables,rule,ruleset,tranlsation,string match,--hex-string,application layer signature,IPTables::Parse Perl,hex character | ||
| − | | | + | |Version identifier=1.6.6 |
| − | |Last review by= | + | |Version date=2016/12/04 |
| − | |Last review date= | + | |Version status=stable |
| + | |Version download=http://www.cipherdyne.org/fwsnort/download/fwsnort-1.6.6.tar.bz2 | ||
| + | |Version comment=1.6.6 stable released 2016-12-04 | ||
| + | |Last review by=Alejandroindependiente | ||
| + | |Last review date=2017/02/26 | ||
|Submitted by=Database conversion | |Submitted by=Database conversion | ||
|Submitted date=2011-04-01 | |Submitted date=2011-04-01 | ||
| − | | | + | |Status= |
| − | | | + | |Is GNU=No |
| − | | | + | |License verified date=2005-07-11 |
| − | | | + | }} |
| + | {{Project license | ||
| + | |License=GPLv2orlater | ||
| + | |License verified by=Janet Casey | ||
|License verified date=2005-07-11 | |License verified date=2005-07-11 | ||
| − | |||
}} | }} | ||
{{Person | {{Person | ||
| + | |Real name=Michael Rash | ||
|Role=Maintainer | |Role=Maintainer | ||
| − | |||
|Email=mbr@cipherdyne.com | |Email=mbr@cipherdyne.com | ||
|Resource URL= | |Resource URL= | ||
| Line 48: | Line 46: | ||
|Security=firewall | |Security=firewall | ||
|Use=security | |Use=security | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
}} | }} | ||
{{Software prerequisite | {{Software prerequisite | ||
| Line 58: | Line 51: | ||
|Prerequisite description=IPTables_Parse | |Prerequisite description=IPTables_Parse | ||
}} | }} | ||
| + | {{Featured}} | ||
Revision as of 21:14, 25 February 2017
fwsnort
http://www.cipherdyne.org/fwsnort/
Translates snort rules into an equivalent iptables ruleset
'fwsnort' translates snort rules into an equivalent iptables ruleset. By using the iptables string match module, fwsnort detects application layer signatures which exist in many snort rules. It adds a --hex-string option to iptables, which lets users directly input snort rules that contain hex characters into iptables rulesets without modification. 'fwsnort' also uses the IPTables::Parse Perl module to (optionally) restrict the snort rule translation to only those rules that specify traffic that could potentially be allowed through an existing iptables policy.
Licensing
License
Verified by
Verified on
Notes
Leaders and contributors
| Contact(s) | Role |
|---|---|
| Michael Rash | Maintainer |
Resources and communication
| Audience | Resource type | URI |
|---|---|---|
| Debian (Ref) | https://tracker.debian.org/pkg/fwsnort | |
| Support | Mailing List Info/Archive | http://lists.sourceforge.net/mailman/listinfo/psad-discuss |
| Developer | VCS Repository Webview | http://www.cipherdyne.org/cgi/viewcvs.cgi/fwsnort/ |
Software prerequisites
| Kind | Description |
|---|---|
| Weak prerequisite | IPTables_Parse |
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software or copyright-licenses or other similar notices described in this text has its own copyright notice and license, which can usually be found in the distribution or license text itself.