[Snort-users] Pass rule sometimes does not work

Hess, Ben ben.hess at ...7996...
Tue Jan 14 09:09:08 EST 2003

We are using snort center v0.9.6 and I can not find where I can enter that
command. Does anyone know? Or do I have to upgrade my snortcenter?

-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic at ...7509...]
Sent: Tuesday, January 14, 2003 9:47 AM
To: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Pass rule sometimes does not work


Hess, Ben wrote:
> I have a web server that allows use of the CGI calendar feature on some 
> of the web sites. I wrote a pass rule that should allow the traffic to 
> not be picked up but every so often I get an alert from one of the 
> allowed addresses. Does anyone know where I should look to troubleshoot 
> this issue?

Try this in your configfile:

config order: pass info alert log activation dynamic

> Ben


Edin Dizdarevic

This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030114/e9c020e7/attachment.html>

More information about the Snort-users mailing list