[Snort-users] blacklist vs black_list :: pulledpork overwrites the files with a list of IP addresses

Steve Crow scrow at ...16818...
Wed May 28 16:47:53 EDT 2014

Pulledpork is overwriting my blacklist.rules or black_list.rules files that
normally has rules in it with a list IP addresses. Whichever is listed in
snort.conf gets overwritten.

Why are there two similarly named rules files.
What are their proper uses.
How does it need to be specified in snort.conf so that pulledpork doesn't
overwrite the rules with IP addresses?

Thank you!


More information about the Snort-users mailing list