Snort mailing list archives

in or out this is the problem!!


From: "Federico Lombardo" <egopfe () hotmail com>
Date: Thu, 21 Mar 2002 14:59:49 +0100

I've two interfaces.
1) is the LAN interface
2) is the DMZ interface
Each interface has a snort sensor.

if I want for example log syn packets from dmz to lan... where I must put this rules ?

in the LAN interface or in the DMZ one ?

Current thread: