Snort mailing list archives
Snort behind host's firewall
From: RoBSD <robsd () softhome net>
Date: Fri, 8 Jun 2001 09:13:45 +0100
Hello, And sorry if I ask a question that has already a answer on the list! I want to deploy 4 servers on one collocation center and my servers will be in one network with servers that are not ours and I don't want to provide IDS for them. So, if it's possible to configure snort to not use promiscuous mode and to analyze only packets that pass through my firewall. I know that I can use "-h IP" but on 2 servers I will have multiple IP's (more than 20) and for this I will have to add for every new IP a new configuration! And in the same time I want to spare same CPU time and only analyze what pass the firewall! Thank you for your response! Radu Coroi -- Best regards, RoBSD mailto:robsd () softhome net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort behind host's firewall RoBSD (Jun 08)
- RE: Snort behind host's firewall Jason Lewis (Jun 08)
- <Possible follow-ups>
- RE: Snort behind host's firewall Hawrylkiw, Dan G (Jun 08)