NetSQUID is a Perl script (daemon) that sits in between Snort and IPTables. It gathers alerts generated by Snort, then automatically creates an IPTables firewall entry to block the alerting host (such... More

NetSQUID is a Perl script (daemon) that sits in between Snort and IPTables. It gathers alerts generated by Snort, then automatically creates an IPTables firewall entry to block the alerting host (such as those infected by viruses). Web traffic is redirected to a Web server that can alert the user to the infection. The host is automatically unblocked after a specified time. It can also send DHCP address requests, so rogue DHCP servers can be detected by Snort.  [edit]  Less