[Snort-users] my logs is flooding with snort w/ some weird message about port 53
ml at ...1718...
Tue Sep 4 13:46:03 EDT 2001
i dont want to remove that rule i want to leave it as is
i want to configure bind to use unprivilage port
i'm using BIND 9.2.0rc1
thanks in advance
----- Original Message -----
From: "Ramin Alidousti" <ramin at ...2444...>
To: "alexus" <ml at ...1718...>
Cc: "Ramin Alidousti" <ramin at ...2444...>;
<snort-users at lists.sourceforge.net>
Sent: Tuesday, September 04, 2001 4:22 PM
Subject: Re: [Snort-users] my logs is flooding with snort w/ some weird
message about port 53
> What version of bind are you using?
> You have two options:
> 1) Force named to use an unprivileged port (bind 8.1 and
> above use an unprivileged port by default and the previous
> versions use port 53).
> 2) You can remove that alert rule.
> On Tue, Sep 04, 2001 at 04:13:00PM -0400, alexus wrote:
> > hm okay i did that
> > same thing...
> > coment out doesn't make sense.. you gotta specify to use port >1023
More information about the Snort-users