[Snort-users] Pass rule sometimes does not work

Edin Dizdarevic edin.dizdarevic at ...7509...
Tue Jan 14 08:47:04 EST 2003


Hi,

Hess, Ben wrote:
> I have a web server that allows use of the CGI calendar feature on some 
> of the web sites. I wrote a pass rule that should allow the traffic to 
> not be picked up but every so often I get an alert from one of the 
> allowed addresses. Does anyone know where I should look to troubleshoot 
> this issue?

Try this in your configfile:

config order: pass info alert log activation dynamic

> 
> Ben
> 

Edin_


-- 
Edin Dizdarevic






More information about the Snort-users mailing list