Detect and defend against network attacks with fwsnort

System administrators need to stay ahead of new security vulnerabilities that leave their networks exposed every day. A firewall and an intrusion detection systems (IDS) are two important weapons in that fight, enabling you to proactively deny access and monitor network traffic for signs of an attack. Study the administration of fwsnort and how it can be used to instruct iptables to detect attacks that are associated with the Snort signature ruleset in this chapter download from Linux Firewalls: Attach Detection and Response with iptables, psad, and fwsnort. Chapter coverage includes:

• Installing fwsnort
• Running fwsnort
• Observing fwsnort in action
• Setting up whitelists and blacklists

Title: Linux Firewalls: Attach Detection and Response with iptables, psad, and fwsnort
Author: Michael Rash
Publisher: No Starch Press
Chapter 10: Deploying fwsnort
ISBN: 1-59327-141-7; Copyright 2005 Michael Rash. All rights reserved.
Used with permission from the publisher. Available from booksellers or direct from No Starch Press