[NTLUG:Discuss] If you were using an intrusion detection system...

[Robert Pearson]

On 5/6/06, Leroy Tennison <leroy_tennison at prodigy.net> wrote:
> What would you use?
>
> I know about Tripwire and have found Aide and LIDS, any input would be
> much appreciated.  Thanks.

>From a 2005 discussion about Firewalls... YMMV

IP Cop. http://www.ipcop.org/

I've been using it for about four years. Not a liveCD solution, but all you
need to do is download the ISO image, burn the CD and do the super easy
install.

It supports up to four interfaces (red-Internet, orange-DMZ, blue-wireless,
and green- internal. Red interface can be broadband, DSL, or dial-up.
Displays system/network status, system/traffic/proxy graphs. Services
provided range from Proxy/DHCP/Time servers to Traffic shaping and Intrusion
detection via SNORT. Firewall provides port forwarding, external access, DMZ
pinholes, etc. Built in support for the most popular dynamic DNS hosting
services like (dynDNS, easydns, regfish, zoneedit, etc.).

Get the latest version 1.4.2 ISO here:
http://prdownloads.sourceforge.net/ipcop/ipcop-1.4.2.iso?download

Lot's of features, it's well worth a look. Don't even think about being
intimidated by the feature list. The install is easy, Easy, EASY. Works well
on just about any old PC you've got laying around. I bet you lunch you won't
be disappointed if you give it a try!