Re: Snort default config ?
On Thu, Aug 26, 2004 at 10:27:33AM -0500, Lance Hoffmeyer wrote:
> Installed snort the other day and I am getting daily reports
> from the default setup. I did nothing but install.
>
> So, is there anything I should/need do to this default config
> for simple monitoring or/and a bit of added security or is
> the default config adequate?
>
> I know this is a loaded question but I am asking primarily
> about any simple/no brainer type of added configs that a
> simple user might want/need.
Depending on why you're using snort, if anything you may want to turn
quite a few rules off. The default config alerts way too much ...
--
_ _ _ _ _ _ _ _ _ _ _ _ _
/ \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \
( t | i | m | @ | i | t | . | k | p | t | . | c | c )
\_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/ \_/
GPG key fingerprint = 1DEE CD9B 4808 F608 FBBF DC21 2807 D7D3 09CA 85BF
Reply to: