Snort and transparant proxy porn rules
-
I've actived snort on my Wan interface (not lan) and I'm trying to google –> porn, sex keywords and nothing is showing up in snort.
It is picking up the chat rules, so snort seems to be working.
Could the transparant proxy server have something to do with this? Has anybody gotten the porn rules to work with snort?
Also, would it be a better idea to active snort on more than one interface (lan + wan) ?
The reason why I'm asking to enable it on the lan interface is because the triggers are showing our gateway IP, so I can't trace which user is causing problems.