* [Sarlug] IPS HLBR 1.0 released (off-topic)
@ 2006-03-07 1:56 Eriberto
0 siblings, 0 replies; only message in thread
From: Eriberto @ 2006-03-07 1:56 UTC (permalink / raw)
To: sarlug
IPS HLBR - Version 1.0 can detect malicious traffic using regular
expressions
Version 1.0 of Hogwash Light BR, released march 5th 2006, brings two
interesting new features. The first one is the ability of using
regular expressions to detect intrusion attempts and e-mails with
virus or phishing. The second is the use of lists with banned words.
HLBR is an IPS (Intrusion Prevention System) that reads network
traffic in the layer 2 of the OSI model. Since it works like a bridge,
it stays in-line in the network topology and doesn't need an IP
address. So, HLBR is invisible to attackers. Traffic filtering
(including the packets contents) can be done with simple rules.
Version 1.0 can use regular expressions to filter the packets. To see a
example of rule with regular expression, please check
http://hlbr.sourceforge.net/hlbr-rule-1.gif .
HLBR lets you use rules for blocking attacks against network servers.
In order to fully understand it please read our documentation at
http://hlbr.sourceforge.net/ips-en.html - explanations about the IPS
concept including charts.
HLBR site is at http://hlbr.sourceforge.net.
(Translated from Portuguese by André Bertelli - andre (a) bertelli.name)
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2006-03-07 1:56 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2006-03-07 1:56 [Sarlug] IPS HLBR 1.0 released (off-topic) Eriberto
Saratov Linux User Group
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sarlug/0 sarlug/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sarlug sarlug/ http://lore.altlinux.org/sarlug \
sarlug@lists.lug.ru sarlug@lug.ru
public-inbox-index sarlug
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sarlug
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git