[Snort-users] RE: Attack on snort running in Public Zone

james hackerwacker at ...3784...
Sun Nov 16 00:17:15 EST 2003

On Sun, 2003-11-16 at 00:44, james wrote:
>  Since this box only needs to listen
> to the mirror port, drop all traffic from the internet to this box, on
> the next hop router.

For the management interface, that is. IP unnumbered
is the way to go.

More information about the Snort-users mailing list