[Snort-sigs] Snort rules problem

Joel Esler jesler at ...435...
Fri Mar 8 09:50:53 EST 2013


On Mar 8, 2013, at 3:25 AM, Y M <snort at ...3751...> wrote:

> Rules enablement/disablement follow certain policy, with default, if I am not mistaken, is connectivity.

It's actually balanced.

> 
> If you use PulledPork, it will handle this for you and enable/disable rules based on the policy you choose.
> 
> Reference: blog.snort.org/2012/01/importance-of-pulledpork.html

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20130308/8179cc28/attachment.html>


More information about the Snort-sigs mailing list