[Snort-inline-users] ares

[Norwich U. - I. S. <in...@no...>]

Hi,

I've been trying for about 4 days to write a rule to drop ares 
connections/downloads, but I'm having no success.
Has anyone successfully written a rule to block ares?

Thx,
Jason