Snort mailing list archives

RE: RE: Attack on snort running in Public Zone

From: james <jamesh () cybermesa com>
Date: 16 Nov 2003 01:11:43 -0700

On Sun, 2003-11-16 at 00:44, james wrote:

 Since this box only needs to listen
to the mirror port, drop all traffic from the internet to this box, on
the next hop router.



For the management interface, that is. IP unnumbered
is the way to go.

Attachment: signature.asc
Description: This is a digitally signed message part

Current thread:

Attack on snort running in Public Zone KS (Nov 14)
- RE: Attack on snort running in Public Zone KS (Nov 14)
  - Re: RE: Attack on snort running in Public Zone james (Nov 14)
    - Re: RE: Attack on snort running in Public Zone Scot Scot (Nov 14)
    - RE: RE: Attack on snort running in Public Zone Michael Steele (Nov 14)
    - RE: RE: Attack on snort running in Public Zone kanwal (Nov 14)
    - RE: RE: Attack on snort running in Public Zone james (Nov 16)
    - RE: RE: Attack on snort running in Public Zone james (Nov 16)
    - RE: RE: Attack on snort running in Public Zone james (Nov 17)
  - RE: RE: Attack on snort running in Public Zone Michael Steele (Nov 14)
- Re: Attack on snort running in Public Zone MH (Nov 14)
- Re: Attack on snort running in Public Zone crtech (Nov 18)
  - RE: Attack on snort running in Public Zone Lucretia Enterprises Administrator (Nov 18)
    - RE: Attack on snort running in Public Zone Michael Steele (Nov 18)
  - AG M.D. DeWar (Nov 18)
    - Re: AG GDHough (Nov 18)
  - Re: Attack on snort running in Public Zone Matt Kettler (Nov 18)
- <Possible follow-ups>
- RE: Attack on snort running in Public Zone Geoff Craig (Nov 14)
- RE: Attack on snort running in Public Zone Aaron (Nov 17)

(Thread continues...)