snort

[am.steen]

I have snort enabled and configured for IDS/IPS but I need to make sure it is working.
so I searches google for top infected web sites and try many of them but most of them are not working.
My question how to get any web site blocked in snort rules for testing ??

[SteveITS]

In normal use across many clients it's pretty common for alerts to show up in daily usage even when running on LAN. Of course it all depends on the rules activated. Is Snort started on the interface?

There is an IDS forum with a quick setup doc.

[NogBadTheBad]

@am-steen Try scanning your WAN IP with shields up:-
https://www.grc.com/

[am.steen]

@nogbadthebad
I try and it is ok
"THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!"

Is there any other sites to test IDS on my firewall ??

[NogBadTheBad]

@am-steen Only you installing nmap / ncat / netcat and you trying from the internet yourself.