[Snort-users] How does a reject rule work?

This is a discussion on [Snort-users] How does a reject rule work? within the Snort forums, part of the System Security and Security Related category; --===============0462831085== Content-Type: multipart/alternative; boundary="0-665483075-1209471310=:10888" Content-Transfer-Encoding: 8bit --0-665483075-1209471310=:10888 ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 04-29-2008
bahamin takhtaei
 
Posts: n/a
Default [Snort-users] How does a reject rule work?

--===============0462831085==
Content-Type: multipart/alternative; boundary="0-665483075-1209471310=:10888"
Content-Transfer-Encoding: 8bit

--0-665483075-1209471310=:10888
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Hi,

I wrote an icmp rule with "reject" action and
test it by echo request packets (ping), but
I didn't catch any "Destination port unreachable"
message on the test system. It seems that my
"reject" rule works as a "drop" rule only! Now
please tell me What do I to fix this problem?


Thanks,
Bahamin

---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
--0-665483075-1209471310=:10888
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Hi,<br><br>I wrote an icmp rule with "reject" action and<br>test it by echo request packets (ping), but<br>I didn't catch any "Destination port unreachable" <br>message on the test system. It seems that my <br>"reject" rule works as a "drop" rule only! Now <br>please tell me What do I to fix this problem?<br><br><br>Thanks,<br>Bahamin<p>



<hr size=1>Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. <a href="http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i...Dypao8Wcj9tAcJ "> Try it now.</a>
--0-665483075-1209471310=:10888--


--===============0462831085==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757...un.com/javaone
--===============0462831085==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============0462831085==--

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:28 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0