Question about snort + squid



  • Hello.

    I have a question regarding Snort + Squid package.
    Is it possible to add a Windows application to a whitelist with Snort?
    After that i want bypass a OpenVPN connection with the whitelist over squid.
    Would that be possible?



  • @derklaus said in Question about snort + squid:

    Hello.

    I have a question regarding Snort + Squid package.
    Is it possible to add a Windows application to a whitelist with Snort?
    After that i want bypass a OpenVPN connection with the whitelist over squid.
    Would that be possible?

    You can only whitelist IP addresses in Snort, so if your Windows application runs on a specific server (as in on some host with a static IP), then the answer might be "yes". You can't whitelist by any kind of name, though.