<![CDATA[Snort custom.rules]]>hi
i would add rules in custom.rules but if i add any rule save it without error but if i would restart interface it's don't start
:-[
that exemple of my custom rule : alert tcp any 80 -> any any (msg:"HTTP trafic ";sid:9000010;)
i don't know why ??

]]>https://forum.netgate.com/topic/53406/snort-custom-rulesRSS for NodeSun, 12 Apr 2026 23:22:25 GMTFri, 22 Feb 2013 10:00:41 GMT60<![CDATA[Reply to Snort custom.rules on Sat, 23 Feb 2013 16:06:53 GMT]]>Did you check the Snort errors in the system logs?

Btw, you have to set the classtype option in your custom rules.

]]>https://forum.netgate.com/post/380954https://forum.netgate.com/post/380954Sat, 23 Feb 2013 16:06:53 GMT