Snort mailing list archives

rule processing.


From: "Federico Lombardo" <egopfe () hotmail com>
Date: Wed, 27 Mar 2002 10:55:18 +0100

Is possibile with snort to make rule processing like a firewall (such as ipfilter or iptable) ?

I mean this:

I put some rule in insertion number

rule 1
rule 2 
rule 3

If the rule 2 matches the packet for its kind of connection and hosts, rule 3 is not processed.


I've some problems discriminating host... :-(




Current thread: