all options
squeeze  ] [  wheezy  ] [  sid  ]
[ Source: hlbr  ]

Package: hlbr (1.7.2-2)

Links for hlbr

Screenshot

Debian Resources:

Download Source Package hlbr:

Maintainers:

External Resources:

Similar packages:

IPS that runs over layer 2 (no TCP/IP stack required)

HLBR stands for Hogwash Light BR. It is a Brazilian fork of Jason Larsen's Hogwash Intrusion Prevention System (IPS). Its main feature is that it can run directly over OSI model layer 2, which means it doesn't even require a TCP/IP stack, running as a bridge.

HLBR comes with a set of rules to detect known malicious network traffic, and you can define your own rules as well. Packet handling include options like dropping or diverting it to another machine (such as a honeypot). Since it works like a bridge and doesn't requires an IP address, it is invisible to intruders. HLBR is a firewall component and must be put before a Intrusion Detection System (IDS). The IDS (Snort or other) will show all suspect traffic doesn't blocked and it can be used to compose new rules to IPS.

HLBR rule definition language has support for regular expressions (Perl). All blocked traffic is dumped in log under tcpdump format.

Tags: System Administration: Monitoring, Implemented in: C, User Interface: Command Line, Daemon, Networking: Firewall, Scanning, Service, Network Protocol: IP, : qa::low-popcon, Role: Program, Security: Anti-Virus, Firewall, Intrusion Detection, Purpose: Monitoring

Other Packages Related to hlbr

  • depends
  • recommends
  • suggests
  • enhances

Download hlbr

Download for all available architectures
Architecture Package Size Installed Size Files
amd64 90.1 kB392.0 kB [list of files]
armel 84.3 kB372.0 kB [list of files]
i386 80.6 kB368.0 kB [list of files]
ia64 120.1 kB944.0 kB [list of files]
mips 84.9 kB416.0 kB [list of files]
mipsel 84.5 kB416.0 kB [list of files]
powerpc 88.8 kB400.0 kB [list of files]
s390 89.8 kB388.0 kB [list of files]
sparc 83.8 kB380.0 kB [list of files]