On Fri, Jan 27, 2012 at 2:38 PM, Gary <gdri...@gmail.com> wrote: > Also, does anyone have an opinion on what's the > best source for free, useful snort rules? bleeding snort? emerging > threats? others? all of the above?
Bleeding Snort is largely (completely?) a ghost in the past. Emerging Threats is outstanding and very much alive. They also maintain a ruleset for Suricata, which if you're not familiar with it, I encourage you to look at. You can get free Snort rules from snort.org as well, although with the disclaimer/conditions that Sourcefire puts on that. -- Darren Spruell phatbuck...@gmail.com _______________________________________________ Honeywall mailing list Honeywall@public.honeynet.org https://public.honeynet.org/mailman/listinfo/honeywall