RE: (no subject)

[Tom Sevy <tsevy () epx com>]

Also, check out Mandrake SNF.  It includes Snort.

-----Original Message-----
From: John Sage [mailto:jsage () finchhaven com] 
Sent: Sunday, March 24, 2002 12:20 PM
To: Micha Silver
Cc: 'snort-users () lists sourceforge net'
Subject: Re: [Snort-users] (no subject)


Micha:

I have no experience with IPCop.

That said, this may be a relatively objective review, see:

http://online.securityfocus.com/infocus/1556

One quote:

"IPCop is a cut-down Linux distribution that is intended to operate as
a firewall, and only as a firewall. It has some advanced firewalling
features, including VPNs using IPSec. This article describes the
set-up and use of IPCop, and contains a few comments about its
features...."

And another:

"IPCop includes the Snort intrusion detection system, which is quite a
powerful system for detecting various attacks on internal servers. 
If you are using IPCop to protect a server or two (either on your DMZ
or your GREEN network) then you will find Snort quite useful.

IPCop makes setting up Snort very simple. Just go to the "IDS" tab on
the IPCop menu, and tick the "Enabled" box. Remember to check your log
files regularly if you are running Snort! These are accessible from
the "IDS" tab as well.

An IDS such as Snort (or a firewall, for that matter) is in no way a
substitute for the need to ensure that your Web servers are updated
regularly with the appropriate service packs and security fixes as
soon as they become available from your vendor, be that Debian, Red
Hat, or Microsoft."


Somehow I'm not sure a "cut-down Linux distribution" would be expected
to deal with SCSI, but who knows?


- John
-- 
The weirdest thing about Window$ is that it's so opaque



On Sun, Mar 24, 2002 at 12:14:15PM +0200, Micha Silver wrote:
> Hello all:
>
> Does the kernel supplied with IPCop support SCSI disks? No mention of SCSI
> in the "Hardware Compatibility List".
>
> I'm considering installing IPCops with SQUID enabled in transparent proxy
> mode, and proxying for several hundred computers. My impressions is that a
> large fast SCSI disk would be important here.
>
>
> Micha Silver
> Arava Development Co
> micha () arava co il
> tel: (972) 8-6592270
> cellular: (972) 53-665918
>
> "What good are computers? They can only give you answers." ~ Pablo Picasso

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users