Snort on pfsense tutorial



  • hi everyone, im implementing snort on my pfsense box and i just want to understand every configuration item and also alerts and its meaning..
    Is there any manual or tutorial about snort on pfsense where i can read and learn?
    thanks for your help

    R.



  • There is a video tutorial for suppressing rules.

    https://www.youtube.com/watch?v=uQ7OrxtiAes



  • it is good. ı want to ask question. is snort free or not?



  • Yes it is. Well sort of - you can pay for a 30 day faster subscription feed to get new rules when the come out rather than waiting). Either way you have to register on snort.org to get an oinkcode which you put on pfsense to download new rules. Emergingthreats completely open (though you could also pay for ETPRO). Snort itself is free and open source.



  • @kevross33:

    Yes it is. Well sort of - you can pay for a 30 day faster subscription feed to get new rules when the come out rather than waiting). Either way you have to register on snort.org to get an oinkcode which you put on pfsense to download new rules. Emergingthreats completely open (though you could also pay for ETPRO). Snort itself is free and open source.

    ok. snort is free and open source but rules free only for 30 days. am i right? otherwise i want to use snort with pfsense. i installed snort after that update rules. i try to my localhost with web stress program. but i do not understand to snort it is not blocked or not gives any alert. How can i solve to this problem.



  • ok. snort is free and open source but rules free only for 30 days.

    You can use free rules, It's just not updated as fast as paid subscription.


Locked