Snort - Blocking googlebot's
Hello. i have a problem here, i am hosting a webpage and snort is marking all googlebots as fake user agents….
is there an easy way to fix this so google is allowed to scan the website?
i have tried to fin a list with the ip's but i am not sure if i can trust the content on the sites i have found.
Go to the Snort Alert Tab, under the Source IP youll see a small + icon, click on on it. It will Add This Alert to the suppress list and track by_src IP. You can do the same with Destination IP…
Also, when writing custom rules, you can add negate IPs. From this example, it will triggers from any $EXTERNAL_NET IPs, but not 220.127.116.11
alert tcp [$EXTERNAL_NET,!18.104.22.168] any -> $HOME_NET [80,443]
but how can i be sure it is google ? and not a fake on i supress ?