Snort mailing list archives

'drop' vs 'reject'


From: "Yakov Lerner" <iler.ml () gmail com>
Date: Tue, 14 Aug 2007 15:32:56 +0300

When I put 'reject' on MSN CHAT rules in chat.rules, the
inline snort does not block the MSN traffic, but blocks when I
put 'drop'.
With YAHOO CHAT, it's the opposite. It blocks when I put
'reject' but does not block when I put 'drop'. Why ? What
makes this difference ?
Thanks
Yakov

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: