[Snort-users] Pulledpork Modify Rules Automatically
jlay at slave-tothe-box.net
Wed Jun 14 21:54:01 EDT 2017
On Wed, 2017-06-14 at 21:42 -0400, Jim Campbell wrote:
> Since I last posted here I ended up formatting my hard drive,
> the latest Ubuntu and installing Snort in IPS mode. However, at the
> of the tutorial on
> http://sublimerobots.com/2016/02/snort-ips-inline-mode-on-ubuntu/ it
> shows you how to modify the single local rule to drop rather than
> There is mention of a future page that will tell how to have
> automatically modify all the rules to drop.
> My setup is running in inline mode but so far hasn't reported any
> packets being flagged. I could sure use some help.
Dropsid.conf is where you'll want to look:
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users