Setting Snort policy_mode

[Ricky Huang <rhuang.work () gmail com>]

Hello all,

In the Snort manual, section "1.9.4 Specifying Multiple-Instance Identifiers" 
(http://manual.snort.org/node11.html#SECTION00295000000000000000), it describes Snort's Inline, Passive and Inline-Test 
mode and to start the three modes in the following manner, respectively:
> snort -Q
> config policy_mode:inline
>
> config policy_mode:tap
>
> snort --enable-inline-test
> config policy_mode:inline_test

While I understand how to start snort by hand and passing in -Q or --enable-inline-test, I would like to use /etc/rc.d/ 
script to start up Snort on boot up.  Do I add config policy_mode:(inline | tap | inline_test) in the snort.conf file?  
Do I have to modify the rc.d script to add in the command line arguments?  Or…?


Thanks!

------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!