[Snort-users] ignore host?

eric-dated-1083277626.193075aa63e273 at ...11523... eric-dated-1083277626.193075aa63e273 at ...11523...
Sat Apr 10 12:04:01 EDT 2004


On Sat, 2004-04-10 at 15:44:43 -0300, MEGA Hospedagem proclaimed...

> I should add that on snort.conf ? Does it need the -o parameter?
> 
> the "pass ip xxx.xxx.xxx.xxx any <> any any" (as said by Randy
> Walinga) could be put on snort.conf too? they both do the same thing?
> 

no, in your rule.

RTFM

<http://www.snort.org/docs/snort_manual/node10.html>




More information about the Snort-users mailing list