Snort mailing list archives
Re: Default rule set
From: "Sallee, Jake" <Jake.Sallee () umhb edu>
Date: Sun, 18 May 2014 05:43:08 +0000
Well crap. I'm sorry, for some reason my mail went to you instead of the list. This only seems to happen on the SNORT list, on all the others I subscribe to I can just hit reply and it will go to the list but with the SNORT list it will send it directly to the individual who sent the email and not the list. It is a cruel coincidence that it should happen to the guy who explicitly states NOT to contact him off-list. I am sorry, it was completely accidental. I definitely do not expect you or anyone else to work for free for me. I will re-send the email, and this time I will make sure it goes to the list. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________________ From: waldo kitty [wkitty42 () windstream net] Sent: Saturday, May 17, 2014 8:04 PM To: Sallee, Jake Subject: Re: [Snort-users] Default rule set On 5/17/2014 4:33 PM, Sallee, Jake wrote:
Firstly, thank you all for the info, it has been very helpful.
you are welcome... however, please note three things... 1. my signature specifically asks that list traffic be kept on the list. 2. i do not provide private assistance without a contract. ;) 3. YM wrote the stuff about using the pcre stuff to add the necessary policy to ET rules and then let PP use that to enable the rules. you can also, instead, specifically enable those ET rules you want using the enablesid file... AND you can do both if you need to... so, please resend your post to the list so that YM and others can see it and provide the answers you seek... i don't run PP (yet) so i cannot help there at all... but i will say that you do appear to have understood the two options that YM pointed to... just note that the second one, modifying the ET rules to add a policy setting to them, may not work and YM says that he needs to test that again... see ya on the list! ;) -- NOTE: No off-list assistance is given without prior approval. Please *keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE Instantly run your Selenium tests across 300+ browser/OS combos. Get unparalleled scalability from the best Selenium testing platform available Simple to use. Nothing to install. Get started now for free." http://p.sf.net/sfu/SauceLabs _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Default rule set Sallee, Jake (May 16)
- Re: Default rule set James Lay (May 16)
- Re: Default rule set Kurzawa, Kevin (May 16)
- Re: Default rule set Joel Esler (jesler) (May 16)
- Re: Default rule set waldo kitty (May 16)
- Re: Default rule set Y M (May 17)
- Re: Default rule set waldo kitty (May 17)
- Message not available
- Message not available
- Re: Default rule set Sallee, Jake (May 17)
- Message not available
- Default rule set Sallee, Jake (May 17)
- Re: Default rule set Y M (May 18)
- Re: Default rule set Jefferson, Shawn (May 23)