Snort mailing list archives

help: how to block the_scan when use snort3.0 for port scan detecting ?


From: sofardware via Snort-users <snort-users () lists snort org>
Date: Mon, 11 Feb 2019 15:19:53 +0800 (CST)

      Hi all,
      I found the following words in snort3 user manual,but the manual  does not say how to config the snort3 to 
realize blocking the scan? Who can tell me how ?Thank you very much.
      16.2 Features Improved over Snort 2
              port_scan can block scans (Snort 2 can only detect scans)
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: