On Thu, Aug 26, 2004 at 10:27:33AM -0500, Lance Hoffmeyer wrote: > Installed snort the other day and I am getting daily reports > from the default setup. I did nothing but install. > > So, is there anything I should/need do to this default config > for simple monitoring or/and a bit of added security or is > the default config adequate? > > I know this is a loaded question but I am asking primarily > about any simple/no brainer type of added configs that a > simple user might want/need.
Depending on why you're using snort, if anything you may want to turn quite a few rules off. The default config alerts way too much ... -- _ _ _ _ _ _ _ _ _ _ _ _ _ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ ( t | i | m | @ | i | t | . | k | p | t | . | c | c ) \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ GPG key fingerprint = 1DEE CD9B 4808 F608 FBBF DC21 2807 D7D3 09CA 85BF -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
