[Snort-users] Can i discard a packet when a match accure

Dragos Ruiu dr at ...50...
Sat Aug 12 10:20:23 EDT 2000


On Sat, 12 Aug 2000, Dudi Sterenberg wrote:
> I would like to know if there is a way to DISCARD or DROP a packet if there
> is a match. i am not talking about flexresp.

The "how to write snort rules" document at www.snort.org may be of interest to
you.  Particularly the part about "pass" rule actions that drop packets.   --dr
-- 
dursec.com ltd. / kyx.net - we're from the future    http://www.dursec.com




More information about the Snort-users mailing list