Robert.Searle at ...1614... writes: > So, how do I tell it to ignore the stuff that ipchains blocks. I think I > want to run it in non promiscuous mode? Run it on the internal interface. I don't have a machine to play with ipchains and snort at the moment. -- Chris Green <cmg at ...671...> Fame may be fleeting but obscurity is forever.