Newbie Cant run rules and needs config help Please

[attechni <attechni () attechnical com>]

Newbie Cant run rules and needs config help Please


 I am glad I found this list. Hello every one. I hate to start
  with a problem.
 But I was looking for help online. And found this list.I Hope
you can help.so here it goes. I am on a Mandrake 9.1.System and new to 
Linux,and snort. But I have a A+Cert and have been
 heavily into computers for about 7 years so I thought I would try it. I used 
the Configuration,Packaging,Install method of installing
 snort-1.9.1mdk,snort-plain+flexresp-1.9.1-mdk,SnortSnarf-020516.1-mdk.
 I cant run SQL because I think it is a violation of my ISP'S TOS. So I am not 
running that.But the install did'nt ask for any SQL packages.
 So I guess I am OK there. But snort will not run except from the root 
account. I am OK with that.
'The real problem is that I can not run the rules files. When I try to run 
(snort -T) from a terminal as root I get this error.
 rootblaBlabla# snort -T
 Log directory  /var/log/snort
 Initializing Network Interface eth0
 using config file /root/.snortrc
 Initializing Preprocessors!
 Initializing Plug-ins!
 Parsing Rules file /root/.snortrc

 +++++++++++++++++++++++++++++++++++++++++++++++++++
 Initializing rule chains...
 ERROR: Unable to open rules file: /root/.snortrc or /root//root/.snortrc
 Fatal Error, Quitting..
rootblaBlabla#
 I did a search on my system for .snortrc through,Applications,FileTools,Find 
files. And could not find
snortrc. The only rules files I could find were in /etc/snort/rules.
 Also var has the permissions of Ownership root group root User
 Show,Write,Enter, Group,Show,Enter,Others, Show enter.
Inside of var there is a log dir with the permissions the
 same asstated above. Inside of that is
 a snort dir set to User Show,Write,Enter Group Show,Enter Others no
 writes. From opening a terminal as root from inside the snort dir. Is
 the only place I
 can get it to run properly.
 What is the best way to set up the permission writes for snort. That is also 
secure.
 I  only want root to be able to run it.
 Oh also when I run netstat-a. It looks alot different running it in 
Linux.Than it does in Windows.
 What is the best way to map out my network? This system has two NIC cards one 
that goes to hub that has nothing else connected to it.
(Trying to use that as a firewall connection). A externall Belkin Router that 
the other NIC plugs into. There is another Win98SE system
pluged into the router.

 Thanks
 appreciate any help .  T


-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users