[Snort-users] Whitelist IP's?

waldo kitty wkitty42 at ...14940...
Tue Jul 8 15:48:27 EDT 2014


On 7/8/2014 1:49 PM, Jeff Meigs wrote:
> Hey Everyone,
>
> Trying to whitelist an IP so I don’t receive alerts from it. Do I do this in the
> threshold.conf? If so whats the proper way to write it?

try the reputation processor instead... whitelist the IPs you want to pass on 
without molestation...

http://manual.snort.org/node176.html

and here's a link to copy of the README.reputation file...

https://github.com/jasonish/snort/blob/master/doc/README.reputation


-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.




More information about the Snort-users mailing list