[Snort-users] running snort on webserver

Ralf Hildebrandt Ralf.Hildebrandt at ...821...
Tue Apr 24 07:35:34 EDT 2001


On Tue, Apr 24, 2001 at 12:32:07PM +0200, Simon Frohn wrote:

> Would you recommend putting snort on
> the same machine the webserver is running?

Well, yes. As a bonus, you can use snortsnarf for the generation of reports,
which can be served using the webserver!

> Or is it safer to rely on ip-firewalling and not
> to scan http-traffic?

Well, if you run snort chrooted as unprivileged user, it shouldn't be too
insecure!

-- 
ralf.hildebrandt at ...821...                            innominate AG
System Engineer                        Don't be afraid of what you see -
Diplom-Informatiker                     be afraid of what you don't see!
tel: +49.(0)7000.POSTFIX  fax: +49.(0)30.308806-698         

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20010424/89c44452/attachment.sig>


More information about the Snort-users mailing list