RE: Pass rule sometimes does not work

["Hess, Ben" <ben.hess () techalliancegroup com>]

We are using snort center v0.9.6 and I can not find where I can enter that
command. Does anyone know? Or do I have to upgrade my snortcenter?

-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic () interActive-Systems de]
Sent: Tuesday, January 14, 2003 9:47 AM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Pass rule sometimes does not work



Hi,

Hess, Ben wrote:
> I have a web server that allows use of the CGI calendar feature on some 
> of the web sites. I wrote a pass rule that should allow the traffic to 
> not be picked up but every so often I get an alert from one of the 
> allowed addresses. Does anyone know where I should look to troubleshoot 
> this issue?

Try this in your configfile:

config order: pass info alert log activation dynamic

> Ben

Edin_


-- 
Edin Dizdarevic




-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users