Koozali.org: home of the SME Server

Allowing all traffic

Justin

Allowing all traffic
« on: October 17, 2000, 09:38:16 PM »
I am playing with Snort and plan on using it with a modified e-Smith server as a basic IDS. Has anyone tried this yet?

I just plan on setting up some snort rulesets and changing the default chains to allow across the board then drop it in behind my firewall just passing the traffic straight through it and publishing the report to a password protected IBAY. It would be accessed using an SSL connection across the Internet.

Open to suggestions.....

I will post my results.