Snort mailing list archives

help with file BPF block ip


From: hernani <coelho.hernani () sapo pt>
Date: Tue, 01 Jul 2014 16:47:01 +0100

hello,

I need help with file ignore.bpf

i have this in file and snort starts good but dont block alerts from ip
  ---->

(!(host 2.x.x.x )or
!(host 212.x.x.x && dst port 143)or
!(host 157.x.x.x && dst port 993))

this is right ?

thanks

hernani

------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: