[Snort-users] a drop rule instead of log or alert

Erek Adams erek at ...577...
Mon Oct 15 08:27:04 EDT 2001


On Mon, 15 Oct 2001, Mike Walter wrote:

> 	Yes you can do a pass rule and then start up snort with a -o option
> so the pass rules will process first.

Yes, this will work.  The only thing is it's not quite what I think Patrick
was asking for.



More information about the Snort-users mailing list