[Snort-users] blacklist vs black_list :: pulledpork overwrites the files with a list of IP addresses

Steve Crow scrow at ...16818...
Wed May 28 16:47:53 EDT 2014


Pulledpork is overwriting my blacklist.rules or black_list.rules files that
normally has rules in it with a list IP addresses. Whichever is listed in
snort.conf gets overwritten.

Why are there two similarly named rules files.
What are their proper uses.
How does it need to be specified in snort.conf so that pulledpork doesn't
overwrite the rules with IP addresses?

Thank you!

Steve






More information about the Snort-users mailing list