Snort



  • there is a problem with snort not blocking all the alerts is that normal or is that a problem !



  • Do you have any IP ranges white listed?

    You also set how long the IP stays blocked for so if the alert was generated longer ago then the block time the IP will be removed from the block list.



  • @stuen93:

    Do you have any IP ranges white listed?

    You also set how long the IP stays blocked for so if the alert was generated longer ago then the block time the IP will be removed from the block list.

    No i do not have anything white listed .


Log in to reply