Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort blocking for more than an hour

    pfSense Packages
    3
    4
    1.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cdsu
      last edited by

      I was wondering if there is a way to change or have the option in the snort gui to change the amount of time snort blocks a host.

      1 Reply Last reply Reply Quote 0
      • Y
        yoda715
        last edited by

        As of right now, no.

        1 Reply Last reply Reply Quote 0
        • C
          cdsu
          last edited by

          would modifying the crontrab entries (/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 1800 snort2c or /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot) work?

          1 Reply Last reply Reply Quote 0
          • S
            sullrich
            last edited by

            Not on future versions, you need to modify the config.xml file.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.