[Snort-users] About using reject in pulledpork

carlopmart carlopmart at ...11827...
Fri Apr 1 18:22:06 EDT 2011


Hi all,

  Is it possible to use "reject" instead of "drop" on some signatures?? 
I have read modifysid.conf but says explicit "If you are attempting to 
change rulestate (enable,drop,disable) from here then you are doing it 
wrong, it is much more efficient to do so from within the respective 
rulestate modification configuration files"

Thanks.
-- 
CL Martinez
carlopmart {at} gmail {d0t} com




More information about the Snort-users mailing list