Hi.. I want to set up a LAN which will have a victim machine and set up a second system with SNORT running on it. The second system with SNORT should act as a gateway between the LAN and the external network. The external network will have a system which will attack the victim machine. For the second machine to be a gateway with SNORT running on it, I just have to enable IP FORWARDING with two NIC inserted into the system..... Is it right or wrong??? I have like very basic knowledge about LINUX and networking. Can someone help me out with this setup plz????

Do you mean like a honeypot or are you trying to attack that victim computer for testing? "Best Practices", Event viewer, host file, perfmon, antivirus, anti-spyware, Live CD's, backups, are in my top 10

exactly....to attack the victim machine. Basically doing this project to demonstrate how snort (running on the second machine between victim and attacker) will prevent the attack, and the second part of the project is to overcome snort i.e to successfully attack the victim machine.