[Snort-users] SnortSam - a few questions

Hi!

We have successfully installed a great Snort solution here, comprising
Snort, SnortCenter, Acid and SnortSam, and everything is working fine.

I have two questions regardins SnortSam, though:

1) Is there a list of "proven" attack rules, that we can use as a basis for
configuring these rules to use SnortSam to block the attackers at the
firewall?

2) Although SnortSam is working fine, we don´t get the alerts on Acid
regarding the rule that we have chosen for the SnortSam test. Do we have to
duplicate the rules that we chose to run with SnortSam, or there is another
way to get Acid alerts for these rules too?

TIA,
Carlos.

__________________________________________________ _______
Voce quer um iGMail protegido contra vírus e spams?
Clique aqui: http://www.igmailseguro.ig.com.br
Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users