<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
Hi,<br>I want create a simulation of IPS with Snort in-line anche Iptables. I installed Snort in-line and use this command:<br><i># iptables -A OUTPUT -p tcp --dport 80 -j QUEUE<br># snort -QDc /etc/snort/snort.conf</i><br><br>I configured snort.conf: <br><br># Configure Inline Resets<br># ========================<br># <br>....<br>#<br><i>config layer2resets<br>config layer2resets: 96:b6:23:db:10:14</i><br><br>But everytime Snort run, it return me this message:<br><br><i>Reading from iptables<br>Running in IDS mode<br>Initializing Inline mode<br>InitInline: : Failed to send netlink message: Connection refused<br><br></i>So I try to load module ip_queue with: <br><i>modprobe ip_queue<br></i><i>FATAL: Module ip_queue not found</i><br><br>What can I do?<br><br><br><br><br /><hr />Dove sono i tuoi amici? <a href='http://www.windowslive.it/invitaAmici.aspx' target='_new'>Aggiungili a Messenger.</a></body>
</html>