There’s a NetSQUID prototype almost completely working.
I had to add some shared libs for the perl IPTables module that weren’t in the TAMU package, and the DNS server parsing in the netsquid perl program was slightly broken. I got some snort rules that should detect various worms and added a simple test one for HTTP to make sure it was working right. The main thing at the moment is that HTTP redirection on blocking is not working properly. I’m not sure about the network topology, iptables, or thttpd, so we’ll see what happens Monday.
Posted by Rowan Littell at July 9, 2004 12:13 PM