snort_inline 2.8.4.1 static with nflink
Update new version about snort_inline 2.8.4.1 with nflink
http://www.snortattack.org/static/snort_inline_2.8.4.1.nflink.static.gz
For the new type of rules enable DCE/RPC 2 Preprocessor:
preprocessor dcerpc2: \
memcap 102400, events [smb, co, cl]
preprocessor dcerpc2_server: \
default, policy WinXP, \
detect [smb [139,445], tcp 135, udp 135, rpc-over-http-server 593], \
autodetect [tcp 1025:, udp 1025:, rpc-over-http-server 1025:],
smb_max_chain 3
disablee : DCE/RPC preprocessor.
Stay tuned!