Noob Question Snort/Oinkcode Rule Sets?
TAC57 last edited by
Am I right to assume that if I download the VRT rules with my oinkcode this will not only enable alerts but also physically block various threats?
If so, this will generally prevent me from having to go in to Snort and manually block stuff (unless I become more skilled), i.e. I don't have to manually add items to the suppression list from the Alerts screen do I?