[Snort-users] ICMP - redirect host

David Alexandre M. de Carvalho david at ...6169...
Thu Jul 4 07:39:17 EDT 2002

I have a red hat linux 7.2 configured to be a gateway to a masquerade network using ipchains.
I have lot's of snort logs, but the most frequent are:
"ICMP - redirect host. Classification: Potencially bat traffic".

If I add the rule /sbin/ipchains -N icmp-acc to accept standard ICMP errors, and a few more "config"
will this reduce the size of my logs ? Since they are mostly these messages.

Best regards.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020704/99bee4bb/attachment.html>

More information about the Snort-users mailing list