Snort blocking company emails after turning on web-client.rules



  • Hi all,

    I am using snort. When I turn on the web-client.rules, my webmail.company.com gets blocked and also from outlook I am not able to send and receive any emails.

    I do not have dns rules on and also I have disabled pop3 rules and smtp rules.

    When I enable web-client.rules, I see can see sypware etc blocked but my company’s external email provider gets blocked. Please can someone advice as to what rules should be disabled on web-client.rules.

    I am confused right now.

    Thanks



  • @hdavy2002:

    Hi all,

    I am using snort. When I turn on the web-client.rules, my webmail.company.com gets blocked and also from outlook I am not able to send and receive any emails.

    I do not have dns rules on and also I have disabled pop3 rules and smtp rules.

    When I enable web-client.rules, I see can see sypware etc blocked but my company’s external email provider gets blocked. Please can someone advice as to what rules should be disabled on web-client.rules.

    I am confused right now.

    Thanks

    There is a setting on the snort package tab called "whitelist" add your companies ips there and anyone else you want to "never" block.

    james



  • Thanks for that. I added the ip's on the whitelist and re-enabled the web-client.rules, then I rebooted the server and it works beautifully. Thanks once again.


Log in to reply