Re: Configuration issue, Part II

[Erek Adams <erek () theadamsfamily net>]

On Mon, 24 Sep 2001, John Sage wrote:

> Let's see...
>
> *rummages around in logs*

[...snip...]

> <same sorta crap goes on for hours...>
>
>
> Realize, again, that this is snort and ipchains running on the same box.

I think that's the key thing here...  If it's on the same box, it should be
seen by snort, whereas if it's behind the firewall, it won't.

> Dialup, ppp...
>
> Command line:
>
> snortREL -b -i ppp0 -c /usr/local/snort-1.8.1-RELEASE/snortREL.conf &

*Gack*  Now that I really think about it, I do recall Marty or Dragos going
into a lengthy discussion on this.  Same box, OK.  Seperate and behind, bad.

I'm such a gimp.  Thanks for the correction John!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users