[Snort-users] whitelist rule to 1 ip?

Morgan Cox morgancoxuk at ...11827...
Wed Mar 3 05:11:49 EST 2010


Hi.

I did ask this a while ago but never got a response.

What is the correct way of white-listing a rule for a specific IP .

I know that your can suppress warnings of a rule to an IP using the
threshold file, but is thee any way to completely whitelist a rule - to 1 IP
only?

Any help on this will be appreciated.

Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100303/bc14b8f5/attachment.html>


More information about the Snort-users mailing list