[Snort-openappid] OPENAPPID Custom rules to block globoplay not working

RECIMERO CESAR Fabre cesar.fabre at hc.fm.usp.br
Tue May 29 13:03:25 EDT 2018


Hi guys!

I’m trying to block the “globoplay”, but I’m not having success on pfsense
2.4.3-p1. Follows the custom rule in:

Snort Interfaces -> LAN Rules -> Category Selection: custom.rules

alert tcp $HOME_NET any -> $EXTERNAL_NET any
(msg:“globoplay”;flow:from_client;appid:globoplay; sid:1000055 ;
classtype:misc-activity; rev:1;)

I tried “drop” but it did not work!

Any idea?


tks


-- 
************************************
César Fabre, MSc
NETI-HCFMUSP | CIS
Telefone: (11) 2661-6018
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20180529/03f5f0a5/attachment.html>


More information about the Snort-openappid mailing list