[Snort-users] Snort ports?
Escudero, Peter Louis
peterlouis.escudero at ...7950...
Thu Mar 31 16:26:48 EST 2005
Thanks a lot. You've been very helpful.
From: Paul Melson [mailto:psmelson at ...5068...]
Sent: Thursday, March 31, 2005 2:08 PM
To: Escudero, Peter Louis; snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Snort ports?
Assuming the MySQL database is on the ACID console, just one line:
permit tcp host [sensor address] host [ACID console address] eq 3306
This will allow the sensor to make the connection to MySQL, which is all
it needs to do. Of course, if this is an inside/outside scenario, you
might consider a different method of deploying your sensor so that the
MySQL flow is not traversing an untrusted network.
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Escudero,
Sent: Thursday, March 31, 2005 4:33 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Snort ports?
Our sensor needs to send alerts to the ACID console that's behind a
Cisco PIX firewall. What ports/services need to be opened? Any info you
can provide will be greatly appreciated.
More information about the Snort-users