Daniel Weismüller wrote:
Hi Daniel,
Hi Rob,
did you see Guardian? In my opinion it does nearly the same.
I had looked at Guardian in the past but as I thought it was tied closely with snort I had not paid it much much attention. I've had another look and see it has an 'Ignored Hosts' facility so I tried adding a blocking entry. I'm sure it blocks but it doesn't generate iptable rules so its operation is rather unclear to me.
Thank you for the pointer but I am much happier with the way I am familiar with YMMV!
Kind Regards
Rob