[Snort-users] HELP!

Susan Kay Coulter skc at ...440...
Fri Nov 9 13:18:02 EST 2001


> Date: Fri, 09 Nov 2001 11:10:10 -0500
> From: Noah Silverman <noah at ...4048...>
> To: <snort-users at lists.sourceforge.net>
> Subject: [Snort-users] HELP!

> I put in the following rules:
> pass icmp any any <> 123.123.123.123 any
> pass tcp any any <> 123.123.123.123 any
> pass udp any any <> 123.123.123.123 any
> 

Are you running snort with the -o option?
If not, your pass rules are basically worthless.

-- 
Susan Coulter
Network Security Team
CCN-5 Network Engineering
Los Alamos National Laboratory
voice: (505) 667-8425
fax:   (505) 665-7793




More information about the Snort-users mailing list