IDS question (for a noob)

[Brian Kelsay]

Especially since you don't know what you are doing, on your first 
attempt, build on the shoulders of giants.  IPCOP, found at ipcop.org 
has a 25-30MB downloadable ISO that has Red Hat 7.3, snort, iptables and 
is secure by default.  Also has a nice little web page you can admin the 
thing from and grab log files of hack attempts, etc.  I use it as my 
firewall (it stand between my machines and the wild and wooly internet. 
  It has worked great for about 3-4 months now.  If you want to add 
ACID, you can, but I would add mySQL to another internal box and have 
the logs sent there for analysis.  You can read more about the reasoning 
behind this in the IPCop docs.

-- 
A Computer without Microsoft is like a chocolate cake without mustard.
-as seen on IRC