Re: [Snort-inline-users] Ruleset Functions

[Will M. <wil...@gm...>]

On 6/24/05, Ken Garland <ken...@ro...> wrote:
> What are the available functions for the rules file? In the readme file
> I see:
>=20
> drop
> reject
> sdrop
>=20
> Are all of the typical snort functions available to snort-inline? If I
> setup an alert rule can snort-inline handle it?

Yes
> Also has anyone had success with using 'config layer2resets' ? I'd like
> to set this up based on MAC address.

There is a bugfix for the current layer2rests code that is going to be
included in snort_inline-2.3.3 and snort-2.4.  If you want it right
away let me know and I'll forward it to you.  Could you please clarify
what you mean by "set this up based on MAC address"

Regards,

Will
> Thanks,
> Ken
>=20
>=20
> -------------------------------------------------------
> SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
> from IBM. Find simple to follow Roadmaps, straightforward articles,
> informative Webcasts and more! Get everything you need to get up to
> speed, fast. http://ads.osdn.com/?ad_id=3D7477&alloc_id=3D16492&op=3Dclic=
k
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>