Paket: hlbr (1.7.2-2 och andra)

[ Källkod: hlbr  ]

IPS that runs over layer 2 (no TCP/IP stack required)

HLBR stands for Hogwash Light BR. It is a Brazilian fork of Jason Larsen's Hogwash Intrusion Prevention System (IPS). Its main feature is that it can run directly over OSI model layer 2, which means it doesn't even require a TCP/IP stack, running as a bridge.

HLBR comes with a set of rules to detect known malicious network traffic, and you can define your own rules as well. Packet handling include options like dropping or diverting it to another machine (such as a honeypot). Since it works like a bridge and doesn't requires an IP address, it is invisible to intruders. HLBR is a firewall component and must be put before a Intrusion Detection System (IDS). The IDS (Snort or other) will show all suspect traffic doesn't blocked and it can be used to compose new rules to IPS.

HLBR rule definition language has support for regular expressions (Perl). All blocked traffic is dumped in log under tcpdump format.

Märken: Systemadministration: Övervakning, Implemented in: C, User Interface: Command Line, Daemon, Networking: Firewall, Scanning, Service, Network Protocol: IP, : qa::low-popcon, Role: Program, Security: Anti-Virus, Firewall, Intrusion Detection, Purpose: Övervakning

Andra paket besläktade med hlbr

• dep: libc6 (>= 2.10) [hppa, sh4]

  Embedded GNU C Library: Shared libraries
  också ett virtuellt paket som tillhandahålls av libc6-udeb

  dep: libc6 (>= 2.11) [powerpcspe]

  dep: libc6 (>= 2.13) [s390x]

  dep: libc6 (>= 2.3) [amd64, sparc64]

  dep: libc6 (>= 2.3.6-6~) [i386]

  dep: libc6 (>= 2.4) [armel, armhf, mips, mipsel, powerpc, s390]

  dep: libc6 (>= 2.5) [avr32]

  dep: libc6 (>= 2.5-5) [m68k]

  dep: libc6 (>= 2.6) [sparc]

• dep: libc6.1 (>= 2.3) [ia64]

  Embedded GNU C Library: Shared libraries
  också ett virtuellt paket som tillhandahålls av libc6.1-udeb

  dep: libc6.1 (>= 2.4) [alpha]

• dep: libpcre3 (>= 7.7) [ej armhf, s390x]

  Perl 5 Compatible Regular Expression Library - runtime files

  dep: libpcre3 (>= 8.10) [armhf, s390x]

• rec: tcpdump

  command-line network traffic analyzer

• sug: hlbrw

  assistant to help make new rules to HLBR

Hämta hlbr

Hämtningar för alla tillgängliga arkitekturer

Arkitektur	Version	Paketstorlek	Installerad storlek	Filer
alpha	1.7.2-2	101,8 kbyte	440,0 kbyte	[filförteckning]
amd64	1.7.2-2	90,1 kbyte	392,0 kbyte	[filförteckning]
armel	1.7.2-2	84,3 kbyte	372,0 kbyte	[filförteckning]
armhf	1.7.2-2	81,3 kbyte	281,0 kbyte	[filförteckning]
avr32 (inofficiell anpassning)	1.7.2-2	76,4 kbyte	344,0 kbyte	[filförteckning]
hppa	1.7.2-2	90,2 kbyte	388,0 kbyte	[filförteckning]
i386	1.7.2-2	80,6 kbyte	368,0 kbyte	[filförteckning]
ia64	1.7.2-2	120,1 kbyte	944,0 kbyte	[filförteckning]
m68k (inofficiell anpassning)	1.6-2	69,9 kbyte	356,0 kbyte	[filförteckning]
mips	1.7.2-2	84,9 kbyte	416,0 kbyte	[filförteckning]
mipsel	1.7.2-2	84,5 kbyte	416,0 kbyte	[filförteckning]
powerpc	1.7.2-2	88,8 kbyte	400,0 kbyte	[filförteckning]
powerpcspe (inofficiell anpassning)	1.7.2-2+b100	87,2 kbyte	388,0 kbyte	[filförteckning]
s390	1.7.2-2	89,8 kbyte	388,0 kbyte	[filförteckning]
s390x	1.7.2-2	99,3 kbyte	387,0 kbyte	[filförteckning]
sh4 (inofficiell anpassning)	1.7.2-2	82,3 kbyte	380,0 kbyte	[filförteckning]
sparc	1.7.2-2	83,8 kbyte	380,0 kbyte	[filförteckning]
sparc64 (inofficiell anpassning)	1.7.2-2	86,9 kbyte	392,0 kbyte	[filförteckning]