Re: [Snort-users] Snort 2.3

I use host-based protections and the fact that the
server is in a private network adds to the mitigation
factor. Patching not necessary. You can't compromise a
box you can't get to, or even ping. And no one is
going to even try that hard on the inside. Now on a
public server, no doubt patching is neccessary. Raise
your hand if your snort box is a public server.

-------------------------------------------------------
Message: 2
To: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] Snort 2.3
From: James Riden <j.riden@massey.ac.nz>
Date: Fri, 04 Feb 2005 08:42:27 +1300

SN ORT <snort_on_acid@yahoo.com> writes:
<snip>
You can bet I keep all my IDS sensors up to date with
patches; that is
SOP for any box that can receive any kind of IP
traffic, ACLs or
no.


What happens if someone compromises a box that is
allowed to send
to that host?

--
James Riden / j.riden@massey.ac.nz / Systems Security
Engineer
Information Technology Services, Massey University,
NZ.
GPG public key available at:
http://www.massey.ac.nz/~jriden/


Message: 3
Subject: RE: [Snort-users] Snort 2.3
Date: Thu, 3 Feb 2005 13:50:58 -0600
From: "Ron Jenkins" <rjenkins@dibr.net>
To: "James Riden" <j.riden@massey.ac.nz>
Cc: "snort-users" <snort-users@lists.sourceforge.net>

<snip>



__________________________________
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.
http://promotions.yahoo.com/new_mail


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users