Re: Updating Snort Rules...Made Easy..sort of

[auto241065 () hushmail com]

On Tue, 9 Oct 2001 21:55:36 GMT, Dr SuSE <drsuse () drsuse org> wrote:
> For the rules you do not want, simply add them to the pass.rules file and 
> change them from alert to pass.  

Some of us don't do this because we don't want to ignore this traffic if it hits another existing rule or one we write 
in the future. By the way, if you pass TCP traffic, that doesn't cause SPADE to ignore it as well, correct?



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users