[Snort-users] Using so_rules in DROP Mode

Matt Watchinski mwatchinski at ...1935...
Tue Feb 10 11:04:01 EST 2009


yup, just update the stub rule from alert to drop.

-matt

On Mon, Feb 9, 2009 at 7:48 PM, Rodrigo Seguel <rseguel at ...12297...> wrote:
> Is possible set the rules defined on default so_rules (p.e. netibios.so)
> in drop mode ?
>
>
> --
>
>   Rodrigo Seguel <rseguel at ...12297...>
>   Activesec S.A. www.activesec.biz
>   Lerma 411 5to D
>   Capital Federal
>   1414 - Argentina
>   Fax : (54-11)-4776-6897
>   Work: (54-11)-4776-6897
>
> ------------------------------------------------------------------------------
> Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
> software. With Adobe AIR, Ajax developers can use existing skills and code to
> build responsive, highly engaging applications that combine the power of local
> resources and data with the reach of the web. Download the Adobe AIR SDK and
> Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>



-- 
Matthew Watchinski
Sr. Director Vulnerability Research Team (VRT)
Sourcefire, Inc.
Office: 410-423-1928
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/




More information about the Snort-users mailing list