firewall and snort on the same machine

["Mohr, Stefan" <sm () mediascape de>]

hi everybody,

i want to implement a shorewall firewall (first installation is up and
running) on the same machine as snort.

how to do that - because i should block everything unwanted at the external
interface.

what do you think of having a 2nd virtual address on this interface (the
next free ip address in my external network), sniffing with this ip address
in promiscios mode and from the point of the view of the firewall just doing
nothing with this packets?

or is there a better way with a configuration in the snort configs?

stefan mohr

Dipl.-Ing. Stefan Mohr
Manager Operations and Customer Care

mediascape communications AG
Weidestraße 122a
20083 Hamburg
Tel.: 040 / 668610-0
Fax: 040 / 668610-222
www.mediascape.de

This email is confidential. If you are not the intended recipient,
you must not disclose or use the information contained in it.
If you have received this mail in error, please tell us
immediately by return email and delete the document.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users