Linux Forums - Linux Help,Advice & support community:LinuxSolved.com

Network Troublshooting => General Networking Support in Linux => Topic started by: systemx on September 05, 2009, 03:51:20 PM

Title: snort - content filter
Post by: systemx on September 05, 2009, 03:51:20 PM
how can i block url address with snort and redirect the packet to a local page?
( foo.com/last/december/index.php?4455&6F - redirect to localhost:5000 )

i want to study for a  %100 transparent content filter
i have 500.000 domains, 300 url+path
i find the IP addreses of domains and import them to iptables
it works fine.
but what can i do with urls?
i cannot use a system like squid+squidguard.

is there another simple and fast way for this?

thanks.