From: Keg (snrtlstnetscape.net)
Date: Mon Apr 14 2003 - 16:13:49 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I have 2 pass rules that I placed in local.rules: (snort started with -o)
pass ip 10.0.30.4 any -> 10.0.0.0 any
pass ip 10.0.20.6 any -> any
First should take care of cluster servers broadcasts, second takes care
of weird ICMP redirects from Shiva device. Snort cannot be started and
it complains about those pass rules, the moment I disable 'em snort is
started and it works fine.
Is there a syntax problem with those pass rules?
Thanks.
--
Your favorite stores, helpful shopping tools and great gift ideas.
Experience the convenience of buying online with ShopNetscape!
http://shopnow.netscape.com/

-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]