[Snort-users] (no subject)
jsage at ...2022...
Sun Mar 24 14:45:02 EST 2002
I have no experience with IPCop.
That said, this may be a relatively objective review, see:
"IPCop is a cut-down Linux distribution that is intended to operate as
a firewall, and only as a firewall. It has some advanced firewalling
features, including VPNs using IPSec. This article describes the
set-up and use of IPCop, and contains a few comments about its
"IPCop includes the Snort intrusion detection system, which is quite a
powerful system for detecting various attacks on internal servers.
If you are using IPCop to protect a server or two (either on your DMZ
or your GREEN network) then you will find Snort quite useful.
IPCop makes setting up Snort very simple. Just go to the "IDS" tab on
the IPCop menu, and tick the "Enabled" box. Remember to check your log
files regularly if you are running Snort! These are accessible from
the "IDS" tab as well.
An IDS such as Snort (or a firewall, for that matter) is in no way a
substitute for the need to ensure that your Web servers are updated
regularly with the appropriate service packs and security fixes as
soon as they become available from your vendor, be that Debian, Red
Hat, or Microsoft."
Somehow I'm not sure a "cut-down Linux distribution" would be expected
to deal with SCSI, but who knows?
The weirdest thing about Window$ is that it's so opaque
On Sun, Mar 24, 2002 at 12:14:15PM +0200, Micha Silver wrote:
> Hello all:
> Does the kernel supplied with IPCop support SCSI disks? No mention of SCSI
> in the "Hardware Compatibility List".
> I'm considering installing IPCops with SQUID enabled in transparent proxy
> mode, and proxying for several hundred computers. My impressions is that a
> large fast SCSI disk would be important here.
> Micha Silver
> Arava Development Co
> micha at ...5381...
> tel: (972) 8-6592270
> cellular: (972) 53-665918
> "What good are computers? They can only give you answers." ~ Pablo Picasso
More information about the Snort-users