Re: Snort 2.3

[SN ORT <snort_on_acid () yahoo com>]

I use host-based protections and the fact that the
server is in a private network adds to the mitigation
factor. Patching not necessary. You can't compromise a
box you can't get to, or even ping. And no one is
going to even try that hard on the inside. Now on a
public server, no doubt patching is neccessary. Raise
your hand if your snort box is a public server.

-------------------------------------------------------
Message: 2
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort 2.3
From: James Riden <j.riden () massey ac nz>
Date: Fri, 04 Feb 2005 08:42:27 +1300

SN ORT <snort_on_acid () yahoo com> writes:
<snip>
You can bet I keep all my IDS sensors up to date with
patches; that is
SOP for any box that can receive any kind of IP
traffic, ACLs or
no. 


What happens if someone compromises a box that is
allowed to send
to that host?

-- 
James Riden / j.riden () massey ac nz / Systems Security
Engineer
Information Technology Services, Massey University,
NZ.
GPG public key available at:
http://www.massey.ac.nz/~jriden/


Message: 3
Subject: RE: [Snort-users] Snort 2.3
Date: Thu, 3 Feb 2005 13:50:58 -0600
From: "Ron Jenkins" <rjenkins () dibr net>
To: "James Riden" <j.riden () massey ac nz>
Cc: "snort-users" <snort-users () lists sourceforge net>

<snip>


                
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Helps protect you from nasty viruses. 
http://promotions.yahoo.com/new_mail


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users