Snort mailing list archives
Re: Using so_rules in DROP Mode
From: Matt Watchinski <mwatchinski () sourcefire com>
Date: Tue, 10 Feb 2009 11:04:01 -0500
yup, just update the stub rule from alert to drop. -matt On Mon, Feb 9, 2009 at 7:48 PM, Rodrigo Seguel <rseguel () activesec biz> wrote:
Is possible set the rules defined on default so_rules (p.e. netibios.so) in drop mode ? -- Rodrigo Seguel <rseguel () activesec biz> Activesec S.A. www.activesec.biz Lerma 411 5to D Capital Federal 1414 - Argentina Fax : (54-11)-4776-6897 Work: (54-11)-4776-6897 ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Matthew Watchinski Sr. Director Vulnerability Research Team (VRT) Sourcefire, Inc. Office: 410-423-1928 http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/ ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Using so_rules in DROP Mode Rodrigo Seguel (Feb 09)
- Re: Using so_rules in DROP Mode Matt Watchinski (Feb 10)