Re: Router, Firewall, Snort on one system?

[Alejandro Flores <alejandrorflores () gmail com>]

Hello Marius,

> Hi,
> how good/bad is to have Snort running on Router/Firewall? What would
> be the best topology for small network (~10PC)?

I see no problem, as you don't have a huge traffic to analyse. If you
do NAT, run 2 instances of Snort, one for each interface. When you do
NAT and run your snort on the external interface only, you'll never
know what desktop on your lan is 'disturbing the peace', cause you'll
always see the NATed ip address.

Regards,
Alejandro


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users