Re: running snort under LIDS

[Demetri Mouratis <dmourati () cm math uiuc edu>]

On Thu, 18 Dec 2003, Raber wrote:

> hi,
> anyone have some experience to share about running snort under LIDS patched
> kernel?
> i'v put my snort probe in the wild internet and want to have it somewhat
> protected

I have some experience with LIDS and experience with snort, but not snort
under LIDS.  My advise would be to have as little as possible on the LIDS
sensor box and to log remotely.  That will involve the least amount of
pain in setting up the LIDS acls (or whatever LIDS calls them).

Good luck.
---------------------------------------------------------------------
Demetri Mouratis
dmourati () linfactory com



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users