Re: Snort with IPtables

[Steven McLaughlin <steve () Lan com au>]

Great,
Thanks all for your input.
That's one less thing I need to think about now :-)


On 7 June 2013 18:07, waldo kitty <wkitty42 () windstream net> wrote:

> On 6/7/2013 00:08, Jeremy Hoel wrote:
> > we run iptables on all our sensors, but we don't give the sniffing
> > port an ip and have no iptables entries for it.
> >
> > It works like a champ.
>
> i can confirm that there's no conflict... our devices also use iptables and
> snort listens "outside" of them... it sees the traffic before iptables
> gets a
> chance to twiddle with it...
>
> --
> NOTE: No off-list assistance is given without prior approval.
>        Please keep mailing list traffic on the list unless
>        private contact is specifically requested and granted.
>
>
> ------------------------------------------------------------------------------
> How ServiceNow helps IT people transform IT departments:
> 1. A cloud service to automate IT design, transition and operations
> 2. Dashboards that offer high-level views of enterprise services
> 3. A single system of record for all IT processes
> http://p.sf.net/sfu/servicenow-d2d-j
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!



-- 
Best Regards,
Steven McLaughlin
steve () Lan com au
0459 351 266

------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. A cloud service to automate IT design, transition and operations
2. Dashboards that offer high-level views of enterprise services
3. A single system of record for all IT processes
http://p.sf.net/sfu/servicenow-d2d-j

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!