Snort mailing list archives
RE: Newbie question
From: "Potts, Ross A." <RPOTTS () NORTHROPGRUMMAN COM>
Date: Wed, 23 Apr 2003 04:17:11 -0700
This is why I love this list. People answering the way Erick did: He answered the question, then politely guideed Chris to the archives. Thanks, Erick! -----Original Message----- From: Erick Mechler [mailto:emechler () techometer net] Sent: Monday, April 21, 2003 3:54 PM To: Chris Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Newbie question :: I am now to IDS and Snort and have a question. Does having iptable rules :: setup on the machine affect it in any way? Oh, it will be behind our :: firewall. Chris, if you have firewall software installed on the same system as your IDS, then the FW won't affect what your IDS can see. Snort uses libpcap, which is lower on the TCP stack than your FW, so it will see packets before they get dropped. Also, please be sure to check the FAQs and the mailing list archives for information before posting to the list in the future. This question has been answered a few times already in the past. Cheers - Erick ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Newbie question Chris (Apr 21)
- Re: Newbie question Erick Mechler (Apr 21)
- Re: Newbie question (FAQ 4.3 update requested) Matt Kettler (Apr 21)
- <Possible follow-ups>
- RE: Newbie question Potts, Ross A. (Apr 23)
- Newbie Question Wilcoxen, Scott (Apr 25)
- RE: Newbie Question Pacheco, Michael F. (Apr 25)
- RE: Newbie Question Wilcoxen, Scott (Apr 27)