<html><body>What have you been working with? :) When the IPS is working wrong, it's because of the admin ... :)<br/><br/>You probably will invest your time, but the ISP won't. The amount of the problems is multiplying. Tor should evolve, or it will extinct like dinosaurs.<br/><br/><br/>I think that this IPS should be done by community (or at least the setting of some IPS product). It should be completely open and transparent - the code and rules.<br/><p>---------- Původní zpráva ----------<br/>Od: Ralph Seichter <tor-relays-ml@horus-it.de><br/>Komu: tor-relays@lists.torproject.org<br/>Datum: 6. 10. 2016 12:34:02<br/>Předmět: Re: [tor-relays] Intrusion Prevention System Software - Snort or
Suricata</p><br/><blockquote>On 06.10.16 12:12, oconor@email.cz wrote:<br/><br/>> There is a possibility of parsing log of IPS a do actions with the<br/>> policies.<br/><br/>I don't trust any IPS that I have seen so far to come up with smart<br/>enough exit policies. If I were to use an IPS to dynamically limit<br/>inbound traffic (on a non-Tor server) and the IPS gets things wrong,<br/>only my own server is affected. If an IPS gets outbound Tor policies<br/>wrong, it potentially affects a lot of people.<br/><br/>Manually dealing with complaints is a chore, but I am willing to invest<br/>the necessary time and work to be able to make an informed decision. I<br/>can understand that not every service provider has the manpower (or<br/>willingness) to do the same, but I consider Tor's purpose to be too<br/>important to leave decisions to a piece of software.<br/><br/>-Ralph<br/>_______________________________________________<br/>tor-relays mailing list<br/>tor-relays@lists.torproject.org<br/>https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</blockquote></body></html>