How to check that snort actually works ?



  • Hello everyone as a new member of this forum.

    well I am new to the pfsense, and whole firewall thing…
    so now I have all my machines behind pfsense including snort package with this annual VRT premium subscription (snort.org) that apparently updating automatically with the newest list...(really ? I can't access logs...)

    I believe its a good protection, but how can I check that ?

    I test my firewall with services like grc.com , auditmypc.com and looks like alright ... but how accurate are they ?

    grc.com - show no open ports, several stealth.
    auditmypc.com - show open ; 25/TCP, 465/TCP, 587/TCP.

    Should I be happy with this results, this SNORT package and stop for any further test or improvements ?

    Thank you all for your help and any suggestions.
    cqx


Locked