Snort blocking company emails after turning on web-client.rules

hdavy2002

Hi all,

I am using snort. When I turn on the web-client.rules, my webmail.company.com gets blocked and also from outlook I am not able to send and receive any emails.

I do not have dns rules on and also I have disabled pop3 rules and smtp rules.

When I enable web-client.rules, I see can see sypware etc blocked but my company’s external email provider gets blocked. Please can someone advice as to what rules should be disabled on web-client.rules.

I am confused right now.

Thanks

jamesdean

@hdavy2002:

Hi all,

I am using snort. When I turn on the web-client.rules, my webmail.company.com gets blocked and also from outlook I am not able to send and receive any emails.

I do not have dns rules on and also I have disabled pop3 rules and smtp rules.

When I enable web-client.rules, I see can see sypware etc blocked but my company’s external email provider gets blocked. Please can someone advice as to what rules should be disabled on web-client.rules.

I am confused right now.

Thanks

There is a setting on the snort package tab called "whitelist" add your companies ips there and anyone else you want to "never" block.

james

hdavy2002

Thanks for that. I added the ip's on the whitelist and re-enabled the web-client.rules, then I rebooted the server and it works beautifully. Thanks once again.