Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HOw do you make disabled rules stay disabled?

    Scheduled Pinned Locked Moved pfSense Packages
    4 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      awsiemieniec
      last edited by

      I'm disabling a rule in snort, emerging threats - policy.  I click the bright, red X next to the rule, it disables it. I then restart snort and notice the rule is once again active.  What am I doing wrong?  As long as I disable the rule while snort is running, it seems to stay disabled.  Every other config change says one needs to restart the interface/service… so?

      Thanks

      1 Reply Last reply Reply Quote 0
      • J
        joako
        last edited by

        Yes snort deletes the rules and then copies them back when you start.

        You need to use the suppress tab…

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          Here is a howto Video for supresstab

          https://www.youtube.com/watch?v=uQ7OrxtiAes

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • A
            awsiemieniec
            last edited by

            Thanks for the updated info.  I mis-used the "suppress" part.  I thought it was just to not show those events being triggered in the webConfiguration log.

            Thanks!

            AWS

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.