Re: Flexresp problem

["Tudor Panaitescu" <tpanaitescu () colorcon com>]

Nope, no changes. This is what makes it goofier .... Another thing: I have
another sensor running in front of the firewall (no IP), RH7.1 upgraded to
R.H7.2, same config, same packages, same ruleset ... that one works fine. Could
it be because of the aliases I have on eth0 ?

Any other thoughts ?

Thanks and all the best,
Tudor








Erek Adams <erek () theadamsfamily net> on 04/15/2002 01:38:13 PM
                                                              
                                                              
                                                              
  To:          Tudor Panaitescu/ColorconUS@ColorconUS         
                                                              
  cc:          snort-users () lists sourceforge net              
                                                              
                                                              
                                                              
  Subject      Re: [Snort-users] Flexresp problem             
  :                                                           
                                                              






On Mon, 15 Apr 2002, Tudor Panaitescu wrote:

> If snort is stopped, the web service works fine, no resets whatsoever. I
> commented out the offending rules in web-frontpage, started snort and
everything
> works fine again. The interesting thing is that Snort 1.8.3 worked fine, same
> machine, same web server, (almost) same set of rules. Pretty goofy, isn't it ?

Very.

Have you made any changes to the rules?  If I look at those rules I don't see
_any_ react keywords.  Perhaps you've changed them in some sub-included rules
file?

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users