Re: Packet filter choice

From: Luis Garza (vox@consultoreslinux.com)
Date: 12/06/01 

To: Robin Lynn Frank <rlfrank@paradigm-omega.com>
From: Luis Garza <vox@consultoreslinux.com>
Date: 05 Dec 2001 17:30:32 -0600

Robin Lynn Frank <rlfrank@paradigm-omega.com> writes:

> Now, here comes the hard part. I'd like it to be easy to configure since not
> all of these offices are staffed by "computer types". I've looked at snort
> and prelude, and while they fulfill my own needs, they meay be a bit tricky
> for others to configure properly. If anyone has one in mind that adds a
> little ease of use, it would save me having to travel a great deal to set
> things up.

  Why don't you make pre-configured tarballs (or rpms or debs if
  supported by the target distros) and just send them those and have
  them install them? that way they'll only need to run the stuff, and
  it'll do whatever you need it to do. Treat them like unmanaged
  boxes :)

  BTW, logcheck (http://www.psionic.com) is a good program to keep an
  eye on remote logs, I'd recommend you to take a look at it.

  Vox 

-- 
Lic. Luis Garza
Tech Geek
Consultores Linux - Your IT know-how