Snort mailing list archives

Re: my logs is flooding with snort w/ some weird message about port 53


From: "alexus" <ml () db nexgen com>
Date: Tue, 4 Sep 2001 16:44:54 -0400

i dont want to remove that rule i want to leave it as is

i want to configure bind to use unprivilage port

i'm using BIND 9.2.0rc1

thanks in advance

----- Original Message -----
From: "Ramin Alidousti" <ramin () cannon eng us uu net>
To: "alexus" <ml () db nexgen com>
Cc: "Ramin Alidousti" <ramin () cannon eng us uu net>;
<snort-users () lists sourceforge net>
Sent: Tuesday, September 04, 2001 4:22 PM
Subject: Re: [Snort-users] my logs is flooding with snort w/ some weird
message about port 53


What version of bind are you using?

You have two options:

1) Force named to use an unprivileged port (bind 8.1 and
   above use an unprivileged port by default and the previous
   versions use port 53).

2) You can remove that alert rule.

Ramin


On Tue, Sep 04, 2001 at 04:13:00PM -0400, alexus wrote:

hm okay i did that

same thing...

coment out doesn't make sense.. you gotta specify to use port >1023



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: