Re: [Snort-inline-users] Blocking Anomalous Events

[Rob M. <rv...@ca...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 27 Nov 2003, Stephan Scholz wrote:

> I don't believe that any preprocessor actually blocks at the moment.
> Correct me if I'm wrong, Rob. :-)

That is correct.  None of the preprocessors actually drop packets.  
However, it would be really easy to make them do such things.

Rob

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.76

iQA/AwUBP8YgYvnAyY+9KLjdEQLWcwCg5O2lEaVJvnZkJ8lY/MuSE/jIEgcAoIps
fODuls9TnJDRNtbzec+Cu+EU
=3UcE
-----END PGP SIGNATURE-----