[Snort-users] Pass rule sometimes does not work

Hess, Ben ben.hess at ...7996...
Tue Jan 14 09:09:08 EST 2003


We are using snort center v0.9.6 and I can not find where I can enter that
command. Does anyone know? Or do I have to upgrade my snortcenter?

-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic at ...7509...]
Sent: Tuesday, January 14, 2003 9:47 AM
To: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Pass rule sometimes does not work



Hi,

Hess, Ben wrote:
> I have a web server that allows use of the CGI calendar feature on some 
> of the web sites. I wrote a pass rule that should allow the traffic to 
> not be picked up but every so often I get an alert from one of the 
> allowed addresses. Does anyone know where I should look to troubleshoot 
> this issue?

Try this in your configfile:

config order: pass info alert log activation dynamic

> 
> Ben
> 

Edin_


-- 
Edin Dizdarevic




-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030114/e9c020e7/attachment.html>


More information about the Snort-users mailing list