Re: snort on router - risks?

[twig les <twigles () yahoo com>]

I would not bother setting up a second box if this is for your
house and you know what you're doing (as in patching and locking
down the box).  The main reasons to seperate the boxes is to
avoid security holes from misconfigurations (ie, one daemon
misconfigured ruins the hole box and all its services), and
taxing the machine.  

--- Marcus Schopen <lists () localguru de> wrote:
> Hi,
>
> on my DSL-router (masqurading) at home I'd like to install
> snort to see 
> who attacks me from the internet side. I know that one should
> install 
> snort on a seperate hosts before and behind the firewall to
> get the best 
> results, but this is just my little "private-home-net" and I
> don't want 
> to set up further linuxboxes (no money, to space, too loud
> ...).
>
> So my question: what are the risks to set up snort on the
> gateway-router 
> instead of using a seperate snort host? Is that insecure? And
> why?
>
> Thanks
> Marcus
>
> -- 
> Marcus Schopen        (0>
> P.O. Box 10 25 25     //\     Deutsche Zope User Group
> D-33525 Bielefeld     V_/_                www.dzug.org
>
>          Weird, but life is too short, move on ...
>
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites
> including
> Data Reports, E-commerce, Portals, and Forums are available
> now.
> Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Emo is what happens when the glee club goes punk.       
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users