December 18, 2017, 08:30:14 PM

News : LinuxSolved.com Linux Help Community Forum..


Author Topic: snort - content filter  (Read 1704 times)

Offline systemx

  • New Member
  • Posts: 1
snort - content filter
« on: September 05, 2009, 03:51:20 PM »
how can i block url address with snort and redirect the packet to a local page?
( foo.com/last/december/index.php?4455&6F - redirect to localhost:5000 )

i want to study for a  %100 transparent content filter
i have 500.000 domains, 300 url+path
i find the IP addreses of domains and import them to iptables
it works fine.
but what can i do with urls?
i cannot use a system like squid+squidguard.

is there another simple and fast way for this?

thanks.