This is a discussion on [Snort-users] How does a reject rule work? within the Snort forums, part of the System Security and Security Related category; --===============0462831085== Content-Type: multipart/alternative; boundary="0-665483075-1209471310=:10888" Content-Transfer-Encoding: 8bit --0-665483075-1209471310=:10888 ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
--===============0462831085==
Content-Type: multipart/alternative; boundary="0-665483075-1209471310=:10888" Content-Transfer-Encoding: 8bit --0-665483075-1209471310=:10888 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Hi, I wrote an icmp rule with "reject" action and test it by echo request packets (ping), but I didn't catch any "Destination port unreachable" message on the test system. It seems that my "reject" rule works as a "drop" rule only! Now please tell me What do I to fix this problem? Thanks, Bahamin --------------------------------- Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. --0-665483075-1209471310=:10888 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Hi,<br><br>I wrote an icmp rule with "reject" action and<br>test it by echo request packets (ping), but<br>I didn't catch any "Destination port unreachable" <br>message on the test system. It seems that my <br>"reject" rule works as a "drop" rule only! Now <br>please tell me What do I to fix this problem?<br><br><br>Thanks,<br>Bahamin<p> <hr size=1>Be a better friend, newshound, and know-it-all with Yahoo! Mobile. <a href="http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i...Dypao8Wcj9tAcJ "> Try it now.</a> --0-665483075-1209471310=:10888-- --===============0462831085== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757...un.com/javaone --===============0462831085== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users --===============0462831085==-- |
![]() |
| Thread Tools | |
| Display Modes | |
|
|