Snort block outbound "offender"



  • Hello Everyone,

    there is a way to block outbound offender like:

    62 1 TCP ET TROJAN Phoenix kit exploited client requesting malware payload A Network Trojan was Detected 1.2.3.4 8126 -> 77.87.109.40 80 1:2011416:2 06/12-21:42:10

    Blocking Destination ip only ?

    Thanks,


Locked