Guardian and Snort Rule Priority

Questions to IPFire Addons.
Post Reply
csmall
Posts: 30
Joined: January 7th, 2017, 11:57 am

Guardian and Snort Rule Priority

Post by csmall » January 7th, 2017, 2:37 pm

The default setting is priority 3.

When I look at ids logs I see priority 2 entries.

Guardian is not adding any of these to thr block list.

Should it be adding anything between priority 1-3?

I guess I don't understand how it decides what to block. Or is it not working properly?

Thanks!

csmall
Posts: 30
Joined: January 7th, 2017, 11:57 am

Re: Guardian and Snort Rule Priority

Post by csmall » January 7th, 2017, 2:55 pm

I see, the threshold count needs to be met.

They must not be hitting the default count of 3.

Thanks! I should have read more thoroughly. :)

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest