Re: [Snort-users] exclude ip
This is a discussion on Re: [Snort-users] exclude ip within the Snort forums, part of the System Security and Security Related category; This is a multi-part message in MIME format. --===============1948687059== content-class: urn:content-classes:message Content-Type: multipart/alternative; ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
07-06-2006
|
|||
|
|||
Re: [Snort-users] exclude ip
This is a multi-part message in MIME format.
--===============1948687059== content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C6A0F4.D5174D1D" This is a multi-part message in MIME format. ------_=_NextPart_001_01C6A0F4.D5174D1D Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable look at thresholding and/or bpf filters. =20 -----Original Message----- From: snort-users-bounces@lists.sourceforge.net [mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of fname lname Sent: Wednesday, July 05, 2006 5:09 PM To: snort-users@lists.sourceforge.net Subject: [Snort-users] exclude ip =09 =09 If I wanted to exclude an ip from the ids how will i go about doing that. Ex is I wanted to exclude 1.2.3.4 from an smtp rule how can i make that happen? =09 ------_=_NextPart_001_01C6A0F4.D5174D1D Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD><TITLE>Message</TITLE> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <META content=3D"MSHTML 6.00.2900.2912" name=3DGENERATOR></HEAD> <BODY> <DIV><SPAN class=3D343540712-06072006><FONT face=3DArial color=3D#0000ff = size=3D2>look=20 at thresholding and/or bpf filters.</FONT></SPAN></DIV> <DIV><SPAN class=3D343540712-06072006></SPAN> </DIV> <BLOCKQUOTE=20 style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px = solid; MARGIN-RIGHT: 0px"> <DIV></DIV> <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr = align=3Dleft><FONT=20 face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B>=20 snort-users-bounces@lists.sourceforge.net=20 [mailto:snort-users-bounces@lists.sourceforge.net] <B>On Behalf Of = </B>fname=20 lname<BR><B>Sent:</B> Wednesday, July 05, 2006 5:09 PM<BR><B>To:</B>=20 snort-users@lists.sourceforge.net<BR><B>Subject:</B> [Snort-users] = exclude=20 ip<BR><BR></FONT></DIV>If I wanted to exclude an ip from the ids how = will i go=20 about doing that. Ex is I wanted to exclude <A=20 href=3D"http://1.2.3.4">1.2.3.4</A> from an smtp rule how can i make = that=20 happen?<BR></BLOCKQUOTE></BODY></HTML> ------_=_NextPart_001_01C6A0F4.D5174D1D-- --===============1948687059== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=...057&dat=121642 --===============1948687059== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users --===============1948687059==-- 
|
Linear Mode
