Snort mailing list archives
RE: supress an IP address?
From: "Harper, Patrick" <patrick.harper () phns com>
Date: Thu, 28 Oct 2004 12:36:09 -0500
Use a pass rule -----Original Message----- From: Larry Wichman [mailto:larrywichman () yahoo com] Sent: Thursday, October 28, 2004 10:54 AM To: Snorty S Snortman Subject: [Snort-users] supress an IP address? It does not look like you can do this in the threshold.conf, but I would like to not see events from a couple of IP addresses. Does anyone know of a way to do this? Cheers, Larry __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ------------------------------------------------------- This Newsletter Sponsored by: Macrovision For reliable Linux application installations, use the industry's leading setup authoring tool, InstallShield X. Learn more and evaluate today. http://clk.atdmt.com/MSI/go/ins0030000001msi/direct/01/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Disclaimer: This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately. ------------------------------------------------------- This Newsletter Sponsored by: Macrovision For reliable Linux application installations, use the industry's leading setup authoring tool, InstallShield X. Learn more and evaluate today. http://clk.atdmt.com/MSI/go/ins0030000001msi/direct/01/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- supress an IP address? Larry Wichman (Oct 28)
- RE: supress an IP address? Jeff Dell (Oct 28)
- <Possible follow-ups>
- RE: supress an IP address? Bristol, Gary L. (Oct 28)
- RE: supress an IP address? Larry Wichman (Oct 28)
- Re: supress an IP address? Jason (Oct 28)
- RE: supress an IP address? Larry Wichman (Oct 28)
- RE: supress an IP address? Shawn Kottke (Oct 28)
- RE: supress an IP address? Harper, Patrick (Oct 28)
- RE: supress an IP address? Esler, Joel - Contractor (Oct 28)