Re: Global Exceptions - how to ignore vulnerability scanners?

[Brian <bmc () snort org>]

According to Jeff Newton:
> Is there a way to configure a global exception to all rules and
> preprocessors for specific hosts?  Eg. vulnerability scanners
>
> Maybe you specify EXTERNAL_NET = [any,!<ip_address>] ??

Add to the commandline "not host ip"

-- 
Developing error messages? Doesn't Windows have enough of these already? 
And we need a whole fscking book on how to do this?" 
-- Derick Siddoway on O'Reilly NT books


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users