Snort Intrusion Prevention System (IPS) Configuration and Rule Creation

Please check out my Udemy courses! Coupon code applied to the following links....
www.udemy.com/...
www.udemy.com/...
www.udemy.com/...
www.udemy.com/...
www.udemy.com/...
www.udemy.com/...
Snort Intrusion Detection, Rule Writing, and PCAP Analysis:
www.udemy.com/...
Description:
This video will cover how to configure Ubuntu 14.04 as an Intrusion Prevention System (IPS) to actively monitor network traffic and block traffic which meets the criteria stated within Snort rules.
apt-get commands:
apt-get install snort
apt-get install libdnet && apt-get install build-essential &&apt-get install bison flex && apt-get install libpcap-dev && apt-get install libpcre3-dev && apt-get install libnet1-dev && apt-get install zlib1g-dev && apt-get install libnetfilter-queue-dev # daq: nfq && apt-get install libmnl-dev && apt-get install libnfnetlink-dev && apt-get install libnetfilter_queue-dev
Download links:
daq - www.snort.org/...
libdnet - libdnet.sourcef...
To install:
- Go to folder after unzipping
- Type ./configure
- Type make
- Type make install
daq configuration for /etc/snort/snort.conf:
config daq:afpacket
config daq_mode:inline
config policy_mode:inline
Snort inline mode initialization:
snort -Q -c /etc/snort/snort.conf -i eth0:eth1 -A console