fre and simple IDS

[Enno Lenze]

Hello!
For a stand-alone exchange server i want to ahve a small ids (as snirt
under linux), which loggs strange things need not much maintaince and
is free. Is there something available?

regards, enno

 

[Tim]

Hi,

Try snort! Its available for Windows too.

- Tim

 

[Enno Lenze]

Doh!
Thanks

 

[Karl Levinson [x y] mvp]

I might also suggest a file change checker such as the free SIM from
www.gfi.com, if it works on your server, or Osiris if it doesn't work.

Auditing might be a good idea as well, along with some tool to automate
inspecting the security log:

http://securityadmin.info/faq.asp#auditing