Snort mailing list archives

Re: RPM config


From: Matt Kettler <mkettler () evi-inc com>
Date: Wed, 29 Oct 2003 20:53:34 -0500

At 07:42 PM 10/29/2003, dvid johnson wrote:
Does the snort RPM come wiht the enable flex repsonse option already configured or should i use the tarball and enable the option manually?

I'd assume that it's not enabled in any binary unless otherwise specified.

Since flexresp is in general not reliable, but for some reason many people seem to think it's a firewall replacement, it's probably a bad idea to build it into pre-made binary images anyway.. This way someone at least has to try to use flexresp, and might read up enough to understand it's limitations in the process. (it's a useful tool, but thinking it's a firewall replacement is a dangerous thing).

Of course, just adding a few hoops into the process won't really protect people from shooting themselves in the foot, so I'd readily concede that measure doesn't do much.






-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: