Need help whitelisting an IP

  • Since yesterday Snort started blocking my upstream provider IP. Normally I would just disable the false positive on the rule but it's hitting on many rules. I tried setting up an alias with the IP and adding it to Snorts pass list but it's not working.

    Did I set this up wrong?

  • Figured it out, I didn't have a description entered and it wasn't saving my work. Added a description to the alias and it's working now.

    Edit: Spoke too soon, still not working and it's still blocking that IP.  :(

Log in to reply