[Snort-users] Writing/placing custom rules

mac subbu dnacat25 at ...11827...
Thu Feb 9 08:07:15 EST 2006


Hi

We would like to add custom rules to our snort configuration file

11)which would be the best place to write them

a)Write pass alert rules directly in the snort conf file

b)In local rules file


IF i write them in local rules file what would it impact on other rule files

What precautions need to be taken and what are the best practices


regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20060209/e1962794/attachment.html>


More information about the Snort-users mailing list