[Snort-users] i can't block sites with Snort

funky azimlinux at ...131...
Thu Aug 1 01:52:02 EDT 2002


Hi,

I wrote a rule like below:

alert tcp $HOME_NET any -> any 80
( content-list:"game.txt"; msg:"Interdit!!!";
react:block;msg;)

Like that when i run snort, it didn't block the sites,
that contains the words i mentioned in the "game.txt"
file. 

I tried to apply "pass" in place of "alert" , but it
didn'r worked neither.

Any idea?!??!

thanx

funky
Istanbul


__________________________________________________
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com




More information about the Snort-users mailing list