On Tue, 2004-05-11 at 11:27, Tim Alberts wrote: > I was looking for a replacement for the trisentry (portsentry, hostsentry, > logcheck) that is being maintained and doesn't have licensing issues when I > found snort.org. From what I've been able to learn so far it seems to be a > very robust, well developed and supported IDS program. My questions are: > > 1. Why isn't snort included with Fedora? What is Fedora's IDS software (if > any)? No idea, but also why isn't Bittorrent? It was a choice. > > 2. Has anyone tried to use snort with Fedora and how well does it work? Snort works as good, if not better then any IDS out there. There is more tuning involved, but for customization... it can't be beat. > > 3. Does anyone know of any other good IDS programs that will also > automatically link with iptables to dynamically block attacks? you mean other then snort? No idea, we've been running snort for a long time, and love it. >
