Snort mailing list archives

Re: Use dyndns to ignore my ip


From: Jeremy Hoel <jthoel () gmail com>
Date: Fri, 15 Feb 2013 12:33:19 -0700

yeah..  a crontab that checks the dyn dns entry once a minute and also
checkes $HOME_NET and if it doesn't contain the dyn dns address,
rewrite home_net (using sed or something) and then restart snort.

I'd be curious if you knew how often your outside Ip changed.  you
could bump the script up to check every 5 minutes or so if you
wheren't that worried.

On Fri, Feb 15, 2013 at 12:19 PM, Jefferson, Shawn
<Shawn.Jefferson () bcferries com> wrote:
Maybe some sort of script that modifies your snort.conf when your IP changes?  I can't think of any other way to do 
it unfortunately.

-----Original Message-----
From: Andy [mailto:a_w_smith () yahoo co uk]
Sent: Friday, February 15, 2013 12:47 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Use dyndns to ignore my ip

Hi,

Is it possible to use dyndns to ignore my ip address (which changes) I keep getting alerts that I want to suppress 
from just my ip.

Thanks,
Andy


------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
The Go Parallel Website, sponsored by Intel - in partnership with Geeknet,
is your hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials, tech docs,
whitepapers, evaluation guides, and opinion stories. Check out the most
recent posts - join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
The Go Parallel Website, sponsored by Intel - in partnership with Geeknet, 
is your hub for all things parallel software development, from weekly thought 
leadership blogs to news, videos, case studies, tutorials, tech docs, 
whitepapers, evaluation guides, and opinion stories. Check out the most 
recent posts - join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: