[Snort-users] About using reject in pulledpork

carlopmart carlopmart at ...11827...
Mon Apr 4 17:29:58 EDT 2011


On 04/02/2011 12:22 AM, carlopmart wrote:
> Hi all,
>
> Is it possible to use "reject" instead of "drop" on some signatures?? I
> have read modifysid.conf but says explicit "If you are attempting to
> change rulestate (enable,drop,disable) from here then you are doing it
> wrong, it is much more efficient to do so from within the respective
> rulestate modification configuration files"
>
> Thanks.

JJC, could this be possible??

Thanks.

-- 
CL Martinez
carlopmart {at} gmail {d0t} com




More information about the Snort-users mailing list