[Snort-users] Writing/placing custom rules

mac subbu dnacat25 at ...11827...
Thu Feb 9 08:07:15 EST 2006


We would like to add custom rules to our snort configuration file

11)which would be the best place to write them

a)Write pass alert rules directly in the snort conf file

b)In local rules file

IF i write them in local rules file what would it impact on other rule files

What precautions need to be taken and what are the best practices

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20060209/e1962794/attachment.html>

More information about the Snort-users mailing list