Yesterday I was trying to download Micro$oft .net 4.5 and a free program from Computershopper, but one of the Shellcode rules got a bit over-enthusiastic and killed everything. Micro$oft use Akamai servers to serve their content so it would be nice to be able to whitelist Akamai.com or some of its subnets en-masse. Snortsam whitelisting allows for this as the "dontblock" notation can take a single IP, a subnet in CIDR form or an FQDN, but the webconfig only allows a single IP. It would be great if the UI could be extended to allow this.
I have submitted bug 1512 with this request.
I have submitted bug 1512 with this request.
Share this post:
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »