[Snort-inline-users] can snort_inline adjust its rules dynamically?

[ChuZhenlin <ch...@16...>]

Hi,

I wonder if snort_inline can adjust its rules dynamically. When it finds a scan host, can it drop all packets from the scanner? Any other cases?

Maybe the question is too simple. Any reply will be appreciated. Thanks