Alert, but no block…
firebox last edited by
I have an alert coming in as POP Unknown Command - POP3, but the IP is not getting blocked? Where should I start to see why it is not getting blocked?
I tried restarting SNORT.
I do see alerts for scans with the corresponding block.
bmeeks last edited by
Replied to you PM on this topic.