K Anderson <[EMAIL PROTECTED]> writes: > I figure > that the firewall should block the traffic first so as to prevent > ruled traffic from coming in and then, in my thinking, snort shouldn't > see it. > > Hopefully somebody might have an explanation with the why's and how > comes one way or the other.
Your way would rule out sniffing of third-party traffic. _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
