October 17, 2018, 12:21:47 PM

News : LinuxSolved.com Linux Help Community Forum..

Author Topic: snort - content filter  (Read 2057 times)

Offline systemx

  • New Member
  • Posts: 1
snort - content filter
« on: September 05, 2009, 03:51:20 PM »
how can i block url address with snort and redirect the packet to a local page?
( foo.com/last/december/index.php?4455&6F - redirect to localhost:5000 )

i want to study for a  %100 transparent content filter
i have 500.000 domains, 300 url+path
i find the IP addreses of domains and import them to iptables
it works fine.
but what can i do with urls?
i cannot use a system like squid+squidguard.

is there another simple and fast way for this?