[Snort-users] ICMP - redirect host
David Alexandre M. de Carvalho
david at ...6169...
Thu Jul 4 07:39:17 EDT 2002
I have a red hat linux 7.2 configured to be a gateway to a masquerade network using ipchains.
I have lot's of snort logs, but the most frequent are:
"ICMP - redirect host. Classification: Potencially bat traffic".
If I add the rule /sbin/ipchains -N icmp-acc to accept standard ICMP errors, and a few more "config"
will this reduce the size of my logs ? Since they are mostly these messages.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users