Re: Re: IDS-IPS Recommendations

["David Almada" <dalmada () sisp cv>]

You can use it as an IPS also.
You need to use it with IPtables statefull firewal, or ebtables. You have to 
do some minor work configuring the system and the run snort with -Q flag ( 
Snort inline). It will drop malicious traffic as you wish.
You can configure it to be stealth, meaning invisible on the network.

david

----- Original Message ----- 
From: <rohnskii () gmail com>
To: <security-basics () securityfocus com>
Sent: Friday, October 19, 2007 6:47 AM
Subject: Re: Re: IDS-IPS Recommendations


> Dave, I've know you can use Snort as an IDS, how do you use it as an IPS? 
> Or did you mean IDS and was IPS a typo?