[Snort-users] Surpress ICMP messages between two internal IP's (pass rule)

Keith W. McCammon mccammon at ...11827...
Mon Jul 26 07:38:08 EDT 2004


> Just wondering, after I create a suppress rule, Where do I put it? Does it
> go into a rule file or does it go somewhere else?

It can go into local.rules, a new file, snort.conf, etc.  Any file
that is referenced by snort.conf will do.




More information about the Snort-users mailing list