Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort block

    Scheduled Pinned Locked Moved pfSense Packages
    2 Posts 1 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      antilog
      last edited by

      I noticed that there are entries in my Alert tab that are not in the Block tab.  The entries all happen to have a Priority of 1 and src = my WAN interface.  Are they not being blocked because of the priority, or because they are outgoing?

      1 Reply Last reply Reply Quote 0
      • A
        antilog
        last edited by

        Does anyone have any idea about this?  This seems to be an important concept of Snort that I'd like to learn.  Once again, for all enabled rules, some only alert, while other alert and block.  What determines blocking?

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.