Snort - Blocking googlebot's

[notaduck]

Hello. i have a problem here, i am hosting a webpage and snort is marking all googlebots as fake user agents….
is there an easy way to fix this so google is allowed to scan the website?

i have tried to fin a list with the ip's but i am not sure if i can trust the content on the sites i have found.

[fsansfil]

Go to the Snort Alert Tab, under the Source IP youll see a small + icon, click on on it. It will Add This Alert to the suppress list and track by_src IP. You can do the same with Destination IP…

Also, when writing custom rules, you can add negate IPs. From this example, it will triggers from any $EXTERNAL_NET IPs, but not 8.8.8.8

alert tcp [$EXTERNAL_NET,!8.8.8.8] any -> $HOME_NET [80,443]

[notaduck]

but how can i be sure it is google ? and not a fake on i supress ?

[fsansfil]

Verifying Googlebot
https://support.google.com/webmasters/answer/80553?hl=en

Google crawlers
https://support.google.com/webmasters/answer/1061943?hl=en

F.