tailoring rules on internal versus external networks

["Tom Wentworth" <nv8iq9i02 () sneakemail com>]

I have been tasked with tailoring rulesets on a large collection of sensors (more than a hundred).  I need to come up 
with a  baseline set of rules for sensors on both internal and external (internet exposed) segments.  Has anyone come 
up with baseline rulesets for these two very general situations?  I have some ideas about which rules I think are 
appropriate, but could really benefit from someone else's experience.  Any links or advice greatly appreciated.



Thanks,



Tom







-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users