From owner-freebsd-questions Tue Apr 20 12: 7:41 1999 Delivered-To: freebsd-questions@freebsd.org Received: from resnet.uoregon.edu (resnet.uoregon.edu [128.223.144.32]) by hub.freebsd.org (Postfix) with ESMTP id EC22914DCD for ; Tue, 20 Apr 1999 12:07:38 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Received: from localhost (dwhite@localhost) by resnet.uoregon.edu (8.8.8/8.8.8) with ESMTP id MAA26115; Tue, 20 Apr 1999 12:05:10 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Date: Tue, 20 Apr 1999 12:05:10 -0700 (PDT) From: Doug White To: "Jon O." Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Unbinding the stack In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 15 Apr 1999, Jon O. wrote: > Hi: > > I am attempting to deploy some intrusion detection software using freebsd > and would like to get some suggestions about how to keep the IDS machines > quite and just sniffing. > > Here are some requirements: > The IDS needs the interface up -- ifconfig down chokes it. > The NIC needs an IP address. > > I know I could use ipfw and deny everything (this works) but is there > another way. Not that I'm aware of. > And what's up with The Matrix FX created with FreeBSD? Looks cool, eh? :-) Doug White Internet: dwhite@resnet.uoregon.edu | FreeBSD: The Power to Serve http://gladstone.uoregon.edu/~dwhite | www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message