Application layer IDS/IPS by translating snort rules into iptables
http://www.cipherdyne.org/fwsnort/
re-submitted complete patch for FWSNORT correcting:
periodic.daily - now updates the SNORT rules / PSAD signatures daily.
fwsnort.post-install - now just shows a message to update signatures manually
(to avoid any problems with installations on tmpfs). Now uses the system terminal
colours $STRONG $GREEN.
fwsnort.update - update script for FWSNORT & PSAD (if PSAD exists).
fwsnort.up - lives in /etc/network/if-pre-up.d/ to put the SNORT rules into iptables
every time networking comes up.
