[Snort-users] Does Snort support country blocking

Ricky Huang rhuang.work at ...11827...
Wed Mar 6 13:21:13 EST 2013


Looking at the file it seems it is just a text list of individual IPs - does it support range syntax like "[]", "-", or "*"?


On Mar 6, 2013, at 10:18 AM, JJC <cummingsj at ...11827...> wrote:

> That is correct
> 
> On Wed, Mar 6, 2013 at 11:15 AM, Ricky Huang <rhuang.work at ...11827...> wrote:
>> On Mar 6, 2013, at 9:22 AM, JJC <cummingsj at ...11827...> wrote:
>> 
>> You can add entire CIDR blocks of the offending countries to your IP
>> Rep preprocessor […]
>> 
>> 
>> Does IP Rep preprocessor refer to the IP blacklist rules file?
>> 
>> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130306/9a2bb687/attachment.html>


More information about the Snort-users mailing list