Questions about GrSecurity
 

Hello,
I have glanced the GrSecurity documentation, seems like good patch for the kernel and for some security hardening. But i have some questions.

1) In pratical how usefull for busy 300+ domains webserver which runs php,email,mysql and there 300 user who use all kind of scripts.

2) Is there better alternative there

3) if somebody have sample ACL files, which is used on the webserver which has email and database.

if somebody can explain the different between

[ snort + snortsam + iptables + oinkmaster ] vs [Prelude IDS]

thanks in advance

1) In pratical how usefull for busy 300+ domains webserver which runs php,email,mysql and there 300 user who use all kind of scripts.
You will have to use learning mode to make ACL's. You will probably have to tweak settings. Don't expect it to work in one go. Better trial it on a test box first.


2) Is there better alternative there
Define "better".