Snort Blocklist time



  • how do i change the time that an item stays blocked that is listed under blocked tap

    thanks



  • Go to Menu Bar: Diagnostics: Backup/restore

    Find the following in the config.xml file (I have personally changed from 60 minutes to 20 minutes and 3600 snort2c to 1200snort2C)

    <minute>/20</minute>
    <hour>
    </hour>
    <mday></mday>
    <month>
    </month>
    <wday>*</wday>
    <who>root</who>
    <command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 1200 snort2c


Log in to reply