Home page logo

basics logo Security Basics mailing list archives

Re: Re: IDS-IPS Recommendations
From: "David Almada" <dalmada () sisp cv>
Date: Fri, 19 Oct 2007 14:37:40 -0100

You can use it as an IPS also.
You need to use it with IPtables statefull firewal, or ebtables. You have to do some minor work configuring the system and the run snort with -Q flag ( Snort inline). It will drop malicious traffic as you wish.
You can configure it to be stealth, meaning invisible on the network.


----- Original Message ----- From: <rohnskii () gmail com>
To: <security-basics () securityfocus com>
Sent: Friday, October 19, 2007 6:47 AM
Subject: Re: Re: IDS-IPS Recommendations

Dave, I've know you can use Snort as an IDS, how do you use it as an IPS? Or did you mean IDS and was IPS a typo?

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]