[Snort-users] Snort on home DSL connection

This is a discussion on [Snort-users] Snort on home DSL connection within the Snort forums, part of the System Security and Security Related category; Another Snort newb here... I've set up a Snort box at home so I can have an 'expendable' box ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-25-2003
Bell, Josh
 
Posts: n/a
Default [Snort-users] Snort on home DSL connection

Another Snort newb here...

I've set up a Snort box at home so I can have an 'expendable' box to
experiment and learn on. I have an SBC DSL connection. The DSL line
runs into my DSL modem, from there to a little hub, and from there to a
Linksys-type router/firewall, where my machines are connected. It's a
PPPoE DSL connection so my IP can and does change rather frequently. =20

On my Snort box, eth0 is connected to the 'inside' network with an
RFC1918 address and eth1 is connected to the hub in promiscuous mode.
It receives all traffic that hits the hub, the only problem I have is I
don't know how to set the HOME_NET variable. I can't use eth0's IP
because that's just a 192.168 address. Eth1 has no IP and I don't want
to statically plug in in there. Can I use a DNS name? I have a DYNDNS
account which in theory is updated regularly and should be the IP of my
router. If not, is there some way of telling it to use whatever IP is
currently assigned to a particular MAC?

Any help would be greatly appreciated.

Josh Bell
=20
Note: The information contained in this message may be privileged and =
confidential and thus protected from disclosure. If the reader of this =
message is not the intended recipient, or an employee or agent =
responsible for delivering this message to the intended recipient, you =
are hereby notified that any dissemination, distribution or copying of =
this communication is strictly prohibited. If you have received this =
communication in error, please notify us immediately by replying to the =
message and deleting it from your computer. Thank you.



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 11:59 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0