Snort 2.9 includes a number of changes to better handle inline operation,
including:
- a single mechanism for all responses
- fully encoded reset or icmp unreachable packets
- updated flexible response rule option
- updated react rule option
- added block and sblock rule actions
These changes are outlined below.