Re: [Snort-sigs] dropping traffic

From: Erek Adams <erek(at)snort.org>
Date: Wed May 28 2003 - 11:57:59 EDT

On Wed, 28 May 2003, Esler, Joel Contractor wrote:

> pass $SMTP_SERVERS any -> $EXTERNAL_NET any (msg:"Traffic dropper";

http://www.theadamsfamily.net/~erek/snort/ignore.txt

> or what could I write to trigger an IP?

Yes. You could even remove the content to make it fire on any connection

Cheers!

---

Erek Adams

   "When things get weird, the weird turn pro." H.S. Thompson

---

This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Wed May 28 12:39:10 2003