From: William M. <Wil...@kc...> - 2004-03-18 18:57:18
|
Could somebody else verify that uricontent matching is broken in snort_inline-2.1.1? I can block based on content but not uricontent. = I tried turning on the http_inspect and http_inspect_server preprocessors= , but snort-inline doesn't seem to match on the uricontent rules, no log,= no drop, nothing. Regards, Will= |