Hello everyone,

Does anyone has an expirience with I.D.S solutions ?

I think it will be interesting for many unmanaged server users...

Best Regards,
Pavel

They are very helpful

Please check for more details

http://www.snort.org/

http://www.snortsam.net/

Greetings:

Also check out ACID - http://www.andrew.cmu.edu/user/rdanyliw/snort/snortacid.html

Thank you.

For linux - Try Modsecurity for basic protection. Works great.

Greetings:

mod_security is awsome, but it is not an I.D.S. solution.

Thank you.

Originally posted by dynamicnet
Greetings:

mod_security is awsome, but it is not an I.D.S. solution.

Thank you.

Well that is not 100% correct. It can be considered a IDS because you are monitoring the http strings, and you are logging them and have the option to block them. Its not a true ids, but it IS A IDS.

Its not a true ids, but it IS A IDS.

I Agree.

Take a look at LIDS

http://www.lids.org/

Here is a good list of IDS's available.

We use Netscreen, Barbed Wires DP Inspector and GFi

mod_security actually helped me catch an intruder, so I think it is an IDS system. :)