Re: snort not recognizing dns server correctly

[Jeff <jcoppock1@attbi.com>]

dafr, 2002-May-03 10:52 -0700:
> Jeff,
> 
> I had this problem initially as well when I reconfigured snort, until I
> restarted the service. Quite obvious in retrospect, but when I missed
> it initially, I could see others doing the same.
> 
> There is also a section towards the bottom of the snort.conf file that
> you _also_ have to unhash, for DNS_SERVERS, IIRC, to actually activate
> the DNS filter.
> 
> HTH,
> David

David,

Thanks for the pointer.  I found the section and uncommented it
and then restarted snort.  I'll be watching my logs and let you
know what I see.

thanks,
jc


-- 
Jeff Coppock		Systems Engineer
Diggin' Debian		Admin and User


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org