Re: snort not recognizing dns server correctly

[Robert van der Meulen <rvdm@wiretrip.org>]

Hi Jeff,

Quoting Jeff (jcoppock1@attbi.com):
> The 192... is a local private network and the next 2 addresses
> are dns servers.  Snort is constantly logging activity to the 1st
> dns server as a portscan, and as I understand it, this config
> entry is supposed to eliminate that.  Is this incorrect?

Please email me offlist about this; (debian-security is not the right place,
the package maintainer address (mine) is).
It's also important to know what version(s) of the package(s) you're talking
about.

Greets,
	Robert
-- 
( o>                          Linux Generation                          <o )
///\            finger rvdm@debian.org for my GnuPG/PGP key.            /\\\
\V_/            "well you should probably thank me anyway,             \_V/
           those disks needed a major clean up :)"   -- Cracker            


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org