[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: snort not recognizing dns server correctly [closed]

Jeff, 2002-May-06 04:27 -0700:
> dafr, 2002-May-03 10:52 -0700:
> > Jeff,
> > 
> > I had this problem initially as well when I reconfigured snort, until I
> > restarted the service. Quite obvious in retrospect, but when I missed
> > it initially, I could see others doing the same.
> > 
> > There is also a section towards the bottom of the snort.conf file that
> > you _also_ have to unhash, for DNS_SERVERS, IIRC, to actually activate
> > the DNS filter.
> > 
> > HTH,
> > David
> David,
> Thanks for the pointer.  I found the section and uncommented it
> and then restarted snort.  I'll be watching my logs and let you
> know what I see.

After a couple of weeks with these settings, no more portscans
are being registered by my dns servers.  Thanks for you help


Jeff Coppock		Systems Engineer
Diggin' Debian		Admin and User

To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to: