[Wolves] smoothwall advice please

kev adams kev at magicmoon.co.uk
Tue Jun 7 23:26:59 BST 2005


On Tuesday 07 Jun 2005 22:16, Ron Wellsted wrote:

>
> I suspect that snort is being overly cautious and giving a false
> positive on the very long URLs that these websites are generating
> (session ID embedded in the URL)

Bloody 'ell Ron you're spot on - yep just tried it out and managed to repeat 
the intrusion detection error!

>
> Of course you're paranoid, but are you paranoid enough? (or, just
> because you're paranoid it doesn't mean that they are not out to get you!)

Sure - they're out there as I type so I'll keep unplugging the phone line 
whenever I go out ;~)  And checking those logs of course! 

thanks both for the advice
kev



More information about the Wolves mailing list