PaulDotCom mailing list archives

[SNORT] Best rule categories to enable/disable


From: tvfischer at gmail.com (Thomas Fischer)
Date: Wed, 30 Sep 2009 09:18:53 +0200

So outside of enabling everything, which I can't seem to do as it is
seriously impairing my network access by slow load times, pictures not
showing up, IM disconnections, gaming issues.
Which package rules would you enable or disable to have a safe but optimized
snort-ids probe?

Cheers

-- 
Thomas Fischer
    email: tvfischer at gmail.com tvfischer at free.fr  twitter.com/FVT
fvter.wordpress.com
    IM:  gTalk:tvfischer at gmail.com <gTalk%3Atvfischer at gmail.com>
MSN:tvfischer at hotmail.com <MSN%3Atvfischer at hotmail.com>     Y!:tvfischer_FR
    PGP Key:
https://keyserver1.pgp.com/vkd/DownloadKey.event?keyid=0x27FBA97646CF2077
                           -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Sent from Crosne, France
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090930/f6e86c03/attachment.htm 


Current thread: