Snort mailing list archives
Re: A little pass rule help (Absent jusqu'au 29/07/2002)
From: "Pascal Painparay" <pascal.painparay () tdf fr>
Date: Mon, 21 Apr 2003 15:38:52 +0200
Je suis absent jusqu'au 21/04/03 inclus. En cas d'urgence, Vous pouvez contacter : Christophe Savin au 01 49 15 32 75. Cdt Pascal Painparay
snort-users 04/21/03 15:13 >>>
Keg <snrtlst () netscape net> writes:
I have 2 pass rules that I placed in local.rules: (snort started with -o) pass ip 10.0.30.4 any -> 10.0.0.0 any pass ip 10.0.20.6 any -> any First should take care of cluster servers broadcasts, second takes care of weird ICMP redirects from Shiva device. Snort cannot be started and it complains about those pass rules, the moment I disable 'em snort is started and it works fine. Is there a syntax problem with those pass rules?
pass ip 10.0.20.6 any -> any should be pass ip 10.0.20.6 any -> any any
Thanks. -- Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop@Netscape! http://shopnow.netscape.com/ ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Chris Green <cmg () sourcefire com> A watched process never cores. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: A little pass rule help (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 21)