[Snort-users] SNORT on a firewall?

Chris Green cmg at ...671...
Mon Mar 19 14:07:45 EST 2001


Robert.Searle at ...1614... writes:

> So, how do I tell it to ignore the stuff that ipchains blocks.  I think I
> want to run it in non promiscuous mode?

Run it on the internal interface. I don't have a machine to play with
ipchains and snort at the moment. 
-- 
Chris Green <cmg at ...671...>
Fame may be fleeting but obscurity is forever.




More information about the Snort-users mailing list