[Snort-users] ICMP - redirect host

David Alexandre M. de Carvalho david at ...6169...
Thu Jul 4 07:39:17 EDT 2002


Hi!
I have a red hat linux 7.2 configured to be a gateway to a masquerade network using ipchains.
I have lot's of snort logs, but the most frequent are:
"ICMP - redirect host. Classification: Potencially bat traffic".

If I add the rule /sbin/ipchains -N icmp-acc to accept standard ICMP errors, and a few more "config"
will this reduce the size of my logs ? Since they are mostly these messages.

Thanks.
Best regards.
David.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020704/99bee4bb/attachment.html>


More information about the Snort-users mailing list