Snort mailing list archives
Re: Allowing windows updates to pass through snort
From: waldo kitty <wkitty42 () windstream net>
Date: Tue, 18 Feb 2014 13:10:42 -0500
On 2/18/2014 11:30 AM, Doug Olitsky wrote:
OK, I'm a beginner at this and after months of trying to read and teach myself I cry uncle... I have Snort running on a pfSense gateway I built a year ago. For the life of me I cannot figure out how to prevent windows updates from being blocked. My lame solution is to disable Snort for updates and then restart when done.
1. simply disable the specific rule(s) that are causing snort to alert on that traffic. *OR* set those hosts as allowed for those sigs by using the threshold.conf file. -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Managing the Performance of Cloud-Based Applications Take advantage of what the Cloud has to offer - Avoid Common Pitfalls. Read the Whitepaper. http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Allowing windows updates to pass through snort Doug Olitsky (Feb 18)
- Re: Allowing windows updates to pass through snort Tony Reusser (Feb 18)
- Re: Allowing windows updates to pass through snort Tony Reusser (Feb 18)
- Re: Allowing windows updates to pass through snort waldo kitty (Feb 18)
- <Possible follow-ups>
- FW: Allowing windows updates to pass through snort Tony Reusser (Feb 18)