Snort rule setting

[<Greta.Ji () sungard com>]

Snort scans FW port on the Internet DMZ. It works fine. But I see
there are many traffic. I would like to filter some of them out.
 
Ex: Any smtp (25) to mail servers, I don't want to see, but I want to 
    see DoS, overflow attempt,.. and port 25 sends to another system.
 
Looks like I did not find right doc to read. I know how to add more 
rules, but how can I filter them out. 
 
Thank you for the help,
 
--Greta

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users