Snort mailing list archives

Re: simple pass rules


From: Erek Adams <erek () theadamsfamily net>
Date: Mon, 7 May 2001 15:38:23 -0700 (PDT)

On Mon, 7 May 2001, Aaron McKinnon wrote:

Trying to write a simple pass rule:

#Pass rule for uagent (ArcServe 2000 backup agent).
pass tcp 208.158.118.3 6051 -> 208.158.118.100 any
pass tcp 208.158.118.150 any -> 208.158.118.100 139

It seems to ignore the rules in my local.rules file... Have I written these
rules correctly?

[...snip...]

Yes, those look just fine.

Are they not passing traffic?  If not, be sure that you are using the '-o'
command line switch.

-o         Change the rule testing order to Pass|Alert|Log

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: