Snort mailing list archives

help with pass rule


From: "Scott Elgram" <SElgram () verifpoint com>
Date: Thu, 1 Jul 2004 09:39:17 -0700

Hello,
    I am attempting to write a set of rules for my SNORT 2.4 machine.  I would like to ignore any pings that are 
generated by my computer.  I wrote this simple rule
Pass icmp 192.168.0.31 any -> any any 
but the rule doesn't seem to work.  The pings still show up.  I'm I doing something wrong?

-Scott

Current thread: