Re: exclude ip

["Gustavo Monteiro" <gfmonteiro () gmail com>]

You can use "pass rules", if you prefer, but do not forget the -o sintaxe.

Regards,

Gustavo Monteiro



On 7/6/06, Michael Scheidell <scheidell () secnap net> wrote:
> look at thresholding and/or bpf filters.
>
>
>
>
> -----Original Message-----
> From: snort-users-bounces () lists sourceforge net
> [mailto:snort-users-bounces () lists sourceforge net] On
> Behalf Of fname lname
> Sent: Wednesday, July 05, 2006 5:09 PM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] exclude ip
>
> If I wanted to exclude an ip from the ids how will i go about doing that.
> Ex is I wanted to exclude 1.2.3.4 from an smtp rule how can i make that
> happen?
>
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users