Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Snort Newbies » more plugins, less security ?

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

more plugins, less security ?


Posted by pellefantus on March 16, 2005 06:43:56

I was reading a book on snort, and they recommended some plugins to help
me keep track of logs, etc.
Like mysql, apache, acid...
I wanna use snort on the same box I have as router/ftp/firewall, wouldnt it make it more unsecure by having a webserver in it for example, I mean mabye im paranoid, but exploits come out everyday, mabye I forget to update apache on day and boom!
Even if if I dont have the port 80 open to the internet, just to my box, and locally it could be a threat, right?

Posted by nigel on March 16, 2005 09:43:09

You've already got an ftp service running on a "router", how much worse could it get? :)